Published on April 6th, 2020 📆 | 8369 Views ⚑0
Mozilla patches two Firefox vulnerabilities active in the wild
Mozilla patched two critical security issues in Firefox and Firefox ESR that are being abused in the wild.
CVE-2020-6819 and CVE-2020-6820 each involve a race condition that can be exploited to exploited to create a use after free condition. The former vulnerability takes place when running the nsDocShell destructor and the latter when handling a ReadableStream.
Mozilla has included fixes for both flaws in the latest version of the software, Firefox 74.0.1 and Firefox ESR 68.6.1.