FF Sandbox Escape (CVE-2020-12388)
Project Zero's James Forshaw documented a Firefox sandbox escape (CVE-2020-12388) in which one Level 5 content process could open another for full access, because the sandbox's Default DACL granted full access to the Current User, SYSTEM, and RESTRICTED...