IT Security

Mozilla Firefox web browser new zero-day flaws CVE-2022-26485 and CVE-2022-26486

Two new zero-day flaws were found in Mozilla Firefox web browser CVE-2022-26485 and CVE-2022-26486
Reports say that both of these critical zero-day vulnerabilities in Firefox are been actively exploited.
The vendor Mozilla has pushed software updates to its these critical security vulnerabilities,

 

Impact: Critical
Affected Products: Firefox, Firefox ESR, Firefox for Android, Focus, Thunderbird
Solution: Upgrade to the latest versions:

  • Firefox 97.0.2
  • Firefox ESR 91.6.1
  • Firefox for Android 97.3
  • Focus 97.3
  • Thunderbird 91.6.2

Security researchers Wang Gang, Liu Jialei, Du Sihang, Huang Yi, and Yang Kang of Qihoo 360 ATA have been credited with discovering and reporting the shortcomings.

Leave a Reply