Mozilla plugs critical Firefox zero-day used in targeted attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2019-11708+1 related CVE | Sandbox Escape via IPC Parameter Flaw in Mozilla Firefox and Thunderbird | 10.0 group max | 56% | KEV | KEV |
From the original article
2 min read at helpnetsecurity.com
A critical Firefox zero-day remote code execution vulnerability is being abused in targeted attacks in the wild, Mozilla has warned on Tuesday. Mozilla did not share many details about the flaw – it simply stated that it is a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array. pop , and that it can trigger an exploitable crash.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.