A Remote Code Execution vulnerability CVE-2019-17026 in Mozilla Firefox and Firefox ESR   is being actively exploited in the wild. This vulnerability was categorized as a type confusion, which is potentially a critical error that could impact data processing. A remote attacker can create a specially crafted webpage, trick the victim into visiting it, trigger a type confusion error and execute arbitrary code on the target system.

Mozilla's security advisory reads, “Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw”.

This flaw is fixed in Firefox 72.0.1 and Firefox ESR 68.4.1.

Resolution:

Kindly install the following patches to fix the flaw:

312452 - Firefox Setup 72.0.1 x64.exe     

Happy patching!