#Firefox
All CosmicBytez Labs articles tagged #Firefox, across news, security advisories, how-to guides, and projects.
- News
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
Socket found 16 fake Firefox extensions cloning Rabby and OKX wallets that stole recovery phrases via Cloudflare Workers before Mozilla's Oct. 5 removal.
- News
Twitch Extension With 30K Installs Exposes Users' OAuth Tokens
Twitch Enhanced Viewer | JeetBot, installed 30,000+ times, quietly forwarded users' OAuth tokens to a Russian commercial bot service, Socket found.
- News
Chrome and Firefox Updated to Patch Critical, High-Severity Vulnerabilities
Both Google and Mozilla have released urgent browser updates addressing multiple memory safety vulnerabilities, including critical-severity flaws that...
- News
Firefox Vulnerability Allows Tor User Fingerprinting Across
A high-severity Firefox vulnerability (CVE-2026-6770) exploits the internal ordering of IndexedDB database names to generate a stable 44-bit fingerprint...
- Security
CVE-2026-6785: Memory Safety Bugs in Firefox and Thunderbird Enable Arbitrary Code Execution
A CVSS 8.1 high-severity collection of memory safety bugs affects Firefox 149, Firefox ESR 140.9, Firefox ESR 115.34, Thunderbird 149, and Thunderbird ESR...
- Security
CVE-2026-6786: Memory Safety Bugs in Firefox and Thunderbird
Multiple memory safety bugs in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird ESR 140.9 carry a CVSS 8.1 High rating. Some bugs show...
- Security
CVE-2026-6748: Critical Uninitialized Memory Flaw in Firefox and Thunderbird Web Codecs
A critical CVSS 9.8 uninitialized memory vulnerability in Firefox and Thunderbird's Audio/Video Web Codecs component allows remote code execution. Update...
- Security
CVE-2026-5731: Firefox and Thunderbird Critical Memory
Mozilla has patched critical memory safety bugs in Firefox, Firefox ESR, and Thunderbird that showed evidence of memory corruption. Exploiting these flaws...