Firefox Zero-Day Flaws Exploited in the Wild Get Patched
1 min read
Apr 06, 2020
The Mozilla Foundation has patched two zero-day flaws in its browser that could allow for remote code execution.
Mozilla patched two Firefox browser zero-day vulnerabilities actively being exploited in the wild. The flaws, both use-after-free bugs, have been part of “targeted attacks in the wild,” according to a Mozilla Foundation security advisory posted Friday.
Both bugs have critical ratings and allow remote attackers to execute arbitrary code or trigger crashes on machines running versions of Firefox prior to 74.0.1 and its business-friendly Firefox Extended Support Release 68.6.1. The bugs impact Firefox browser versions running on Windows, macOS and Linux operating systems. Details are scant on how either bug (CVE-2020-6819 and CVE-2020-6820) are specifically being exploited by adversaries.
The link for this article located at Threatpost is no longer available.
Related Articles
1 - 0 min read
SPDX 3.0 Revolutionizes Software Management & Security
