CVE-2019-9799: Information disclosure via IPC channel messages.CVE-2019-9798: Library is loaded from world writable APITRACE_LIB location.CVE-2019-9797: Cross-origin theft of images with createImageBitmap.

CVE-2019-9796: Use-after-free with SMIL animation controller.CVE-2019-9795: Type-confusion in IonMonkey JIT compiler.CVE-2019-9794: Command line arguments not discarded during execution.CVE-2019-9793: Improper bounds checks when Spectre mitigations are disabled.CVE-2019-9788: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6.CVE-2019-9789: Memory safety bugs fixed in Firefox 66.CVE-2019-9792: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script.CVE-2019-9791: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey.CVE-2019-9790: Use-after-free when removing in-use DOM elements.The Firefox 66 update includes, 5 critical, 7 high, 5 moderate and 4 low vulnerability fixes. It I recommended to take the necessary precautions by ensuring your products are always updated to avoid an attacker from exploiting one of these vulnerabilities by taking control of an affected system. The Mozilla Foundation has released several security vulnerability fixes for Firefox and Firefox ESR.

Firefox esr ftp