CVE-2019-11749: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of cameras on the system without triggering a user prompt or notification. This allows for the potential fingerprinting of users. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

Affected products

• Mozilla Firefox: before 69.0 (fixed in 69.0)
• Mozilla Firefox ESR: before 68.1.0 (fixed in 68.1.0)

Published 2019-09-27. Last modified 2026-06-17.