Update Alert: "Bugs in Firefox, Chrome, Edge Allow Remote System Hijacking"
-
- Expatriate
- Posts: 567
- Joined: Wed Jan 08, 2020 10:04 pm
- Reputation: 167
Update Alert: "Bugs in Firefox, Chrome, Edge Allow Remote System Hijacking"
These bugs range from "critical" to "high severity," a good indication that its the right time to ensure our browsers are fully up to date.
https://threatpost.com/firefox-chrome-e ... ng/162873/Critical Firefox Use-After-Free Bug
On Thursday, the Cybersecurity and Infrastructure Security Agency (CISA) urged users of Mozilla Foundation’s Firefox browser to patch a bug, tracked as CVE-2020-16044, and rated as critical. The vulnerability is classified as a use-after-free bug and tied to the way Firefox handles browser cookies and if exploited allows hackers to gain access to the computer, phone or tablet running the browser software.
Impacted are Firefox browser versions released prior to the recently released Firefox desktop 84.0.2, Firefox Android 84.1.3 edition and also Mozilla’s corporate ESR 78.6.1 version of Firefox.
“A malicious peer could have modified a COOKIE-ECHO chunk in a SCTP packet in a way that potentially resulted in a use-after-free. We presume that with enough effort it could have been exploited to run arbitrary code,” according to a Mozilla security bulletin posted Thursday.
Chromium Browser Bug Impacts Chrome and Edge
Also on Thursday, CISA urged Windows, macOS and Linux users of Google’s Chrome browser to patch an out-of-bounds write bug (CVE-2020-15995) impacting the current 87.0.4280.141 version of the software. The CISA-bug warning stated that the update to the latest version of the Chrome browser would “addresses vulnerabilities that an attacker could exploit to take control of an affected system.”
Because Microsoft’s latest Edge browser is based on Google Chromium browser engine, Microsoft also urged its users to update to the latest 87.0.664.75 version of its Edge browser.
More Chromium Bugs Impact Chrome and Edge
Twelve additional bugs were reported by Google, impacting its Chromium browser engine. Both Google and Microsoft featured the same list of vulnerabilities...
-
- Similar Topics
- Replies
- Views
- Last post
-
- 1 Replies
- 2468 Views
-
Last post by techietraveller84
-
- 0 Replies
- 528 Views
-
Last post by yong
-
- 11 Replies
- 1683 Views
-
Last post by notnowthen
-
- 11 Replies
- 3161 Views
-
Last post by beaker
-
- 8 Replies
- 1876 Views
-
Last post by ali baba
-
- 9 Replies
- 2264 Views
-
Last post by ssian
Who is online
Users browsing this forum: No registered users and 103 guests