/>
X

Firefox gets fixes for two zero-days exploited in the wild

Mozilla releases Firefox 74.0.1 to patch two bugs exploited by hackers.
catalin-cimpanu.jpg
Written by Catalin Cimpanu, Contributor on
firefox.png
Image: Mozilla

Firefox users are advised to update their browsers to patch two bugs that are being exploited in the real world by hackers.

The fixes are available in Firefox 74.0.1, released earlier today. This new Firefox version includes fixes for CVE-2020-6819 and CVE-2020-6820, two bugs that reside in the way Firefox manages its memory space.

The bugs are so-called user-after-free vulnerabilities, which allow hackers to place code inside Firefox's memory and have it executed in the browser's context. Such bugs can be exploited to run code on victim's devices, although the impact and reach of such code usually varies.

Details about the actual attacks where these two bugs are being exploited are still kept under wraps -- a common practice among software vendors and security researchers, as they focus on delivering patches first and then investigating the attacks further.

Mozilla credited security researchers Francisco Alonso and Javier Marcos with discovering the two zero-days.

In a tweet today, Alonso suggested that the bugs discovered today might also impact other browsers, although it is unclear if those browsers have been exploited as well.

This is the second zero-day that Mozilla patches in Firefox this year. It patched another bug in January, with the release of Firefox v72.0.1. That bug was exploited to attack users in China and Japan as part of a state-sponsored cyber-espionage campaign, according to reports published by Qihoo 360 and Japan CERT.

The world's most famous and dangerous APT (state-developed) malware

Related

Microsoft: This out-of-band Windows security update fixes Microsoft 365 sign-in issues for Arm devices
getty-staff-pointing-at-a-computer-in-an-office.jpg

Microsoft: This out-of-band Windows security update fixes Microsoft 365 sign-in issues for Arm devices

Security
The 5 best outdoor cooking gifts for dad in 2022
Placeholder product image alt text

The 5 best outdoor cooking gifts for dad in 2022

Yard & Outdoors
The 5 best credit cards for online shopping in 2022
Best Credit Card for Online Shopping

The 5 best credit cards for online shopping in 2022

Credit Cards