We have had reports of attacks in the wild abusing this flaw.Albanian, Arabic, Armenian, Asturian, Basque, Belarusian, Breton, Bulgarian, Catalan, Chinese (Simplified), Chinese (Traditional), Croatian, Czech, Danish, Dutch, English (British), English (US), Estonian, Finnish, French, Frisian, Gaelic (Scotland), Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Irish, Italian, Japanese, Kabyle, Korean, Lithuanian, Lower Sorbian, Norwegian (Bokmål), Norwegian (Nynorsk), Polish, Portuguese (Brazilian), Portuguese (Portugal), Romanian, Romansh, Russian, Serbian, Sinhala, Slovak, Slovenian, Spanish (Argentina), Spanish (Spain), Swedish, Turkish, Ukrainian, Upper Sorbian, Vietnamese, Welsh.Įmail client, personal information manager, instant messaging client, news client, feed reader We have had reports of attacks in the wild abusing this flaw.”ĬVE-2022-26486: Use-after-free in WebGPU IPC Framework: “An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. Here’s Mozilla’s description of the two issues:ĬVE-2022-26485: Use-after-free in XSLT parameter processing: “Removing an XSLT parameter during processing could have lead to an exploitable use-after-free.

Mozilla says both vulnerabilities are being actively exploited by bad actors, making it critically important to update immediately. Mozilla has issued updates for Firefox, Firefox for Android, Thunderbird, and Firefox Focus to fix two vulnerabilities being actively exploited in the wild.įirefox, while not nearly as popular as Chrome, is one of the most important web browsers on the market, an open source alternative with a focus on privacy.

Mozilla thunderbird update