CVE-2019-11765

CVE-2019-11765 describes a vulnerability in Mozilla Firefox versions prior to 70. A compromised content process could trick the parent process into displaying a permission prompt. If a user accepted this prompt, an attacker-controlled permission, rather than the intended "Click to Play" permission, would be granted due to insufficient validation. This medium-severity vulnerability (CVSS 6.5) requires user interaction (UI:R) and can be exploited over the network (AV:N) with low attack complexity (AC:L), potentially leading to high integrity impact (I:H) by granting unauthorized permissions. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting low public awareness and interest.