Michael Kacmar

Firefox Plugs Holes In Their Sandbox

On Tuesday of this week, Mozilla released a patch for Firefox that removed a pair of use-after-free bugs from the browsing software. These zero-day bugs allowed attackers to abuse thread shutdowns and text reflows to escape from the security sandbox and possibly launch RCE attacks on victims. There was also another bug that was patched …

Continue reading “Firefox Plugs Holes In Their Sandbox”