On Monday, the US Cybersecurity and Infrastructure Agency added the two Firefox vulnerabilities to its list of known vulnerabilities, giving federal agencies until March 21 to install the fix. "We have had reports of attacks in the wild abusing this flaw," the advisory said.
Known as use-after-free bugs, the flaws could enable a range of security problems if left unpatched - from a simple program crash, to allowing an outside attacker to gain control of the program or your device. In a security advisory issued Saturday, Mozilla said the two zero-day vulnerabilities were of "critical" severity and actively being exploited by malicious actors. On Tuesday, Mozilla released the latest versions of its Firefox browser for download along with new privacy features for its mobile browser, while also offering emergency update patches for the two critical security vulnerabilities it disclosed Saturday. If you use Mozilla Firefox and you haven't updated your browser in a while, it's time to get cracking.
0 kommentar(er)
