Mozilla News Articles

The Record from Recorded Future News

Vulnerabilities - The Shaco: Your Source for Infosec, Bug Bounties, and Tech News.

Explore The Shaco for cutting-edge insights into cybersecurity, ethical hacking, and infosec. Stay updated on bug bounties, technology news, and pro hacking tips to secure the digital world. Join a community dedicated to ethical hacking and advanced security practices.

3 weeks ago

Mozilla fixes critical Firefox bug exploited in the wild

Mozilla has patched a serious security flaw in its Firefox web browser that the company said is being exploited by hackers.

1 month ago

SecurityWeek

Tor Browser Update Patches Exploited Firefox Zero-Day

Tor browser version 13.5.7 is rolling out with patches for an exploited zero-day vulnerability recently addressed in Firefox.

1 month ago

Help Net Security

Actively exploited Firefox zero-day fixed, update ASAP! (CVE-2024-9680) - Help Net Security

Mozilla released an emergency update for its Firefox and Firefox ESR browsers to fix a vulnerability (CVE-2024-9680) exploited in the wild.

1 month ago

Mozilla releases patches for actively exploited Firefox bug

It's patch time for Firefox fans as Mozilla issues a security advisory for a critical code execution vulnerability in the browser. Mozilla said CVE-2024-9680 is a use-after-free issue in Animation timelines –...

1 month ago

The Register

Mozilla releases patches for actively exploited Firefox bug

1 month ago

The Hacker News

Firefox Zero-Day Under Attack: Update Your Browser Immediately

Mozilla urges users to update Firefox after critical CVE-2024-9680 vulnerability is actively exploited.

1 month ago

SecurityWeek

Firefox 131 Update Patches Exploited Zero-Day Vulnerability

Mozilla has released a Firefox 131 update to resolve CVE-2024-9680, a code execution vulnerability exploited in the wild as a zero-day.

1 month ago

iThome

Firefox用於存取PDF檔案的元件存在弱點，有可能被用於執行任意JavaScript程式碼

上週研究人員對於Mozilla基金會在Firefox 126修補的PDF.js漏洞CVE-2024-4367提出說明，並指出這項漏洞與字型處理有關，攻擊者有機會用來執行任意JavaScript程式碼

6 months ago

CybersecurityNews

PoC Released for JavaScript execution Vulnerability in PDF.js

A vulnerability, identified as CVE-2024-4367, PDF.js, was discovered in a widely used JavaScript-based PDF viewer maintained by Mozilla.

6 months ago

cohost!

⚠️⚠️CVE-2024-4367 – Arbitrary JavaScript execution in PDF.js affects firefox < 126, PDF.js < 4.2.67. ⚠️⚠️

https://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js/ [https://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js/] > Because some higher level PDF-related libraries statically embed PDF.js, we recommend recursively checking your node_modules ...

6 months ago

Korben

Votre lecteur PDF.js préféré peut exécuter du code malveillant !

Une vulnérabilité dans PDF.js de Mozilla permet d'exécuter du JavaScript malveillant depuis un PDF piégé. Elle affecte Firefox et les applications utilisant cette bibliothèque. Mise à jour de sécurité recommandée vers la version 4.2.67.

6 months ago

Codean Labs

CVE-2024-4367 - Arbitrary JavaScript execution in PDF.js — Codean Labs

A vulnerability in PDF.js found by Codean Labs. PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This bug allows an attacker to execute arbitrary JavaScript code as soon as a malicious PDF file is opened. This affects all Firefox users (

6 months ago

unSafe.sh

Google addressed 2 Chrome zero-days demonstrated at Pwn2Own 2024

8 months ago

Security Affairs

CVE-2024-29944CVE-2024-29943

Google addressed 2 Chrome zero-days demonstrated at Pwn2Own 2024

Google addressed two zero-day vulnerabilities in the Chrome web browser that have been demonstrated during the Pwn2Own Vancouver 2024.

8 months ago

The Register

CVE-2024-29943

Mozilla fixes $100,000 Firefox zero-days from Pwn2Own event

Mozilla has swiftly patched a pair of critical Firefox zero-days after a researcher debuted them at a Vancouver cybersec competition. Manfred Paul demonstrated the bugs at Pwn2Own last week, the latest in the...

8 months ago

CybersecurityNews

2 Firefox Zero-Days Exploited At Pwn2Own : Patch Now

Mozilla addresses two zero-day vulnerabilities that were recently exploited at the Pwn2Own Vancouver 2024 hacking contest in the Firefox

8 months ago

Lansweeper

Mozilla Fixes 2 Critical Firefox Vulnerabilities Exploited at Pwn2Own - Lansweeper

Mozilla has fixed 2 critical code execution vulnerabilities in Firefox and Firefox ESR. Get the report to locate vulnerable installs now.

8 months ago

SecurityWeek

CVE-2024-29944

Mozilla Patches Firefox Zero-Days Exploited at Pwn2Own

Firefox browser updates address two zero-day vulnerabilities, CVE-2024-29943 and CVE-2024-29944, exploited at the Pwn2Own hacking contest.

8 months ago

unSafe.sh

Mozilla fixed Firefox zero-days exploited at Pwn2Own Vancouver 2024

8 months ago

securityonline.info

CVE-2024-29943

CVE-2024-29943 Archives

VulnerabilityMarch 22, 2024Firefox Patches Critical Zero-Day Vulnerabilities Exposed in Pwn2Own 2024Mozilla has issued emergency security updates to fix two critical “zero-day” vulnerabilities in the Firefox...

8 months ago

unSafe.sh