Mozilla releases Firefox version 74.0.1 to address two vulnerabilities exploited by threat actors in attacks in the wild, users should update their browsers asap. Both issues are user-after-free vulnerabilities that could be exploited to inject code in Firefox’s memory and execute it in the browsers context. Mozilla credited the researcher Francisco Alonso @revskills and the expert Javier Marcos of @JMPSecsecurity for the two issues. Mozilla did not disclose technical details of the vulnerabilities. In January, Mozilla has released security updates for Firefox browser that addresses another zero-day vulnerability that has been exploited in targeted attacks.”]
Source: https://securityaffairs.co/wordpress/101045/security/firefox-74-0-1-two-zero-days.html