This could be used to steal image data from a different site in violation of same-origin policy. Images from a different domain can be read using a canvas object in some circumstances. #CVE-2019-9817: Stealing of cross-domain images using canvas Reporter Luật Nguyễn Impact high Description Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases. #CVE-2019-9816: Type confusion with object groups and UnboxedObjects Reporter Samuel Groß of Google Project Zero Impact high DescriptionĪ possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. Note: users need to update to macOS 10.14.5 in order to take advantage of this change. Firefox now makes use of it on the main thread and any worker threads. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. #CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS Reporter Multiple independent researchers Impact high Description In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts. Mozilla Foundation Security Advisory 2019-15 Security vulnerabilities fixed in Thunderbird 60.7 Announced Impact high Products Thunderbird Fixed in

Mozilla thunderbird update 2018