Mozilla has released Firefox version 67.0.4 and Firefox ESR 60.7.2 that address a second zero-day vulnerability that attackers have been found exploiting in the wild. The newly patched issue is a “sandbox escape” vulnerability, which if chained together with the previously patched “type confusion” bug, allows a remote attacker to execute arbitrary code on victims’ computers just by convincing them into visiting a malicious website. The Tor Project on Friday also released second update (Tor Browser 8.5.3) for its privacy web-browser that patches the second vulnerability Firefox patched yesterday.
Source: https://thehackernews.com/2019/06/firefox-0day-vulnerability.html