Patch/Configuration Management, Vulnerability Management

Mozilla patches two Firefox vulnerabilities active in the wild

Share

Mozilla patched two critical security issues in Firefox and Firefox ESR that are being abused in the wild.

CVE-2020-6819 and CVE-2020-6820 each involve a race condition that can be exploited to exploited to create a use after free condition. The former vulnerability takes place when running the nsDocShell destructor and the latter when handling a ReadableStream.

Mozilla has included fixes for both flaws in the latest version of the software, Firefox 74.0.1 and Firefox ESR 68.6.1.

Related

Critical Apache OFBiz flaw patched

Such a vulnerability evades fixes issued for previous OFBiz bugs, tracked as CVE-2024-38856, CVE-2024-36104, and CVE-2024-32113, all of which have resulted from a fragmentation issue within the controller-view map that could allow unauthenticated remote code or SQL query execution, according to Rapid7 security researchers.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.