Actively exploited Firefox, Tor Browser 0-day patched, update now!
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-9079 | Use-After-Free in Mozilla Firefox and Tor Browser SVG Animation Exploited in the Wild | 7.5 | 87% | KEVPoC ×3 | KEV |
From the original article
1 min read at helpnetsecurity.com
Mozilla and the Tor Project have released security updates that fix the Firefox 0-day flaw that was spotted being exploited to de-anonymize Tor Browser users. It is still unknown who started wielding the exploit initially, although it’s similarity to a previous one used by the FBI in 2013 to target users of hidden services seems to point in that direction.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.