Vulnerabilitycritical
Firefox Patches 2 Zero-Days Exploited at Pwn2Own Berlin with $100K in Rewards
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-4918+1 related CVE | An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object | 9.8 group max | 10% | PoC ×2 |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan May 19, 2025 Browser Security / Vulnerability Mozilla has released security updates to address two critical security flaws in its Firefox browser that could be potentially exploited to access sensitive data or achieve code execution. The vulnerabilities, both of which were exploited as a zero-day at Pwn2Own Berlin, are listed below -
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.