Mozilla has shipped a refresh [mozilla.com] of its flagship Firefox browser to fix a dozen documented vulnerabilities that expose users to URL spoofing, cross-site scripting, code injection and code execution attacks. The most serious fix covers four browser engine and JavaScript engine crashes where Mozilla s developers found evidence of memory corruption. The Feds have published a Top 25 exploits list, rife with big names like BlueKeep, Zerologon and other notorious security vulnerabilities. Read the full story here.
Source: https://threatpost.com/mozilla-patches-dozen-firefox-vulnerabilities-042209/72575/

