Firefox 74.0.1 and 68.6.1 update with 0-day fixes

Published corrective updates to Firefox 74.0.1 and 68.6.1, which fixed two critical vulnerabilities, which can lead to the execution of the attacker's code when processing specially formatted content. It is warned that the network has already identified the facts of the use of these vulnerabilities to carry out attacks. The problems are caused by accessing already freed memory areas (use-after-free) when processing a ReadableStream (CVE-2020-6820) and when executing the nsDocShell destructor (CVE-2020-6819).

Firefox ESR 68.6.1

Source: opennet.ru

Add a comment