5月7日Mozilla基金會發布Firefox 150.0.2，一共修補3項高風險資安漏洞，分別為CVE-2026-8090、CVE-2026-8092、CVE-2026-8093，這些弱點皆與記憶體有關，其中的CVE-2026-8090為記憶體釋放後再存取使用（Use After Free），存在於DOM: Networking元件。另外兩個弱點CVE-2026-8092與CVE-2026-8093，皆為影響記憶體安全性的程式臭蟲，攻擊者有機會用來執行任何程式碼。
Mozilla發布Firefox 150.0.2，修補3項高風險漏洞
Posted in
業界新聞
Show the rest Hide the rest
Read the full article on www.ithome.com.tw
CVE-2026-8092
Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, and Firefox ESR 115.35.2.
www.tenable.com
Comments (0)
Sign in to comment