Corrective updates for Firefox 74.0.1 and 68.6.1, which fix two critical issues , that can lead to the execution of attacker's code when processing specially crafted content. It is reported that there are already instances of these vulnerabilities being exploited for attacks. The problems are caused by accessing already freed memory areas (use-after-free) while handling ReadableStream (CVE-2020-6820) and during the destructor execution nsDocShell (CVE-2020-6819).
Firefox ESR 68.6.1
Source: opennet.ru
