Vulnerability Spotlight: Information disclosure vulnerability in Mozilla Firefox

Summary: Cisco Talos discovered an information disclosure vulnerability in the URL mPath functionality of Mozilla Firefox Nightly Version 78.0a1 x64 and Firefox Release Version 76.0.2 x64, where a specially crafted URL object causes an out-of-bounds read. An attacker triggers the bug by tricking a user into visiting a crafted web page, and the leaked memory can be used to bypass ASLR and, combined with other vulnerabilities, enable arbitrary code execution.
What you should know: A memory leak that defeats ASLR is a building block: on its own it discloses data, but paired with a second bug it becomes a path to running attacker code on the endpoint, and Talos shipped Snort rules 54265 and 54266 to catch the traffic.

Read the original at Cisco Talos ↗

Topics: Cloud Security
Related: Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026
New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026
Cloud-Native Security in 2025: Why Runtime Visibility Must Take Center Stage Cyber Risks ·