Security experts from Cisco Talos have released technical details on a recently addressed vulnerability in Firefox, tracked as CVE-2020-12405, that could be exploited by attackers for remote code execution.
The issue is a use-after-free in SharedWorkerService flaw and received a CVSS score of 8.8. The flaw was addressed by Mozilla along with other four high-severity vulnerabilities with the release of Firefox 77.
The flaw impacts Firefox 76.0a1 x64, it also affected the Tor Browser that addressed it with the release of version 9.5.
