description: A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code execution and a sandbox escape. This vulnerability affects Firefox < 70.
problem types: Invalid styles allowed from content processes
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 70, status: affected, version: unspecified, versionType: custom
}