Recent Firefox Zero-Day Exploited Against Tor Browser Users

Patches for CVE-2024-9680, which were included in Firefox version 131.0.2 and Firefox ESR versions 128.3.1 and 115.16.1, are rolling out in Tor browser version 13.5.7.

The Tor Project noted that Mozilla is aware of attacks exploiting CVE-2024-9680 against Tor Browser users.  

“Using this vulnerability, an attacker could take control of Tor browser, but probably not deanonymize you in Tails,” Tor’s maintainers explained. 

See more: https://www.securityweek.com/recent-firefox-zero-day-exploited-against-tor-browser-users/

#security #cybersecurity #privacy