SSD Advisory – Firefox JavaScript Type Confusion RCE

1 Comment / Vulnerability publication / By

Vulnerabilities Summary A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write, which leads to remote code execution inside the sandboxed content process when triggered. Vendor Response The reported security vulnerability was fixed in Firefox 62.0.3 and Firefox ESR 60.2.2. CVE CVE-2018-12386 Credit Independent security researchers, …

SSD Advisory – Firefox JavaScript Type Confusion RCE Read More »