Attackers could attack Firefox, Firefox ESR and Thunderbird with malicious code. Versions secured against this are already available for download.

Mozilla has the security vulnerability (CVE – 2020 – 26950) classified with the threat level ” critical “. There is hardly any information about the vulnerability in a warning message. The error should be found in the component MCallGetProperty opcode.

Under unspecified circumstances, attackers could exploit this to cause a memory error (use-after-free) to provoke. This is often the starting point for the execution of malicious code.

Update now Security researchers have found the hole discovered at the Chinese hacking competition Tianfu Cup 2020. Mozilla states the vulnerability in the versions Firefox 82. 0.3 , Firefox ESR 78. 4.1 and Thunderbird 78. 4.2 to have closed.

(of)