Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-29 11:57 UTC
  • Importiert: 2026-08-05 08:03 UTC
  • CVSS: 7.5
  • Quelle-ID: thn_global
  • uid_hash: fce3c928bb92b61b0e6ea82d414b987da065768e6568e334b463b8cbf6cf4013

Inhalt

Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to compromise Tor Browser.

Tracked as CVE-2026-10702, the bug provides arbitrary code execution inside the browser's renderer process. Mozilla rated it High and fixed it in the Firefox 151.0.3 update.

"No settings or additional user interaction are required," Eten Zou,

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-10702

HIGH

7.5

HIGH

7.5

2026-06-02

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews