Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?
Top Browser Bugs: From Memory Crashes to Sneaky Save As Attacks
Memory safety bugs in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 could lead to exploitable crashes.
Hot Take:
Looks like the cyber gremlins have been busy! From frame-busting iframes to sneaky ‘Save As’ shenanigans, it’s a wonder our browsers aren’t in therapy. Buckle up, folks, the cyber rollercoaster is in full swing!
Key Points:
- Use-after-free vulnerability due to poorly timed garbage collection.
- Timing attacks to identify active external protocol handlers.
- Bypassing iframe restrictions with a crafty X-Frame-Options header.
- Tricking ‘Save As’ functionality to bypass file extension restrictions on Windows 10.
- Offscreen Canvas cross-origin tainting mishandled, violating same-origin policy.
- Memory corruption via manipulated
<input>tags leading to exploitable crashes. - Memory safety bugs in Firefox and Thunderbird potentially allowing arbitrary code execution.
Already a member? Log in here