importantSYS.SOURCE: The Hacker News• 2026-07-29T17:27:00+05:30

Critical Firefox JIT Flaw Enables Remote Compromise of Tor Browser

#browser security #vulnerability #exploit

A critical Firefox JIT compiler vulnerability (CVE-2026-10702) allows remote code execution through a malicious webpage, compromising Tor Browser without user interaction. The exploit chain, IonStack, combines the browser flaw with a Linux kernel futex vulnerability (CVE-2026-43499) to achieve privilege escalation on Android.

Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to compromise Tor Browser.

Tracked as CVE-2026-10702, the bug provides arbitrary code execution inside the browser's renderer process. Mozilla rated it High and fixed it in the Firefox 151.0.3 update.

"No settings or additional user interaction are required," Eten Zou,

Read original article

*** END OF TRANSMISSION ***

> PROFOUND ACHIEVES UNICORN STATUS WITH $180M SERIES D FUNDING IN 7 MONTHS > WONDER EXPANDS FOOD DELIVERY NETWORK WITH $425M DOORDASH PARTNERSHIP > AI-POWERED CAMERA APP DEVELOPED BY FORMER TIKTOK EXECUTIVES AIMS TO ENHANCE PORTRAIT PHOTOGRAPHY SKILLS > SCALING STARTUPS FROM PROTOTYPE TO PRODUCTION: INSIGHTS FROM TECHCRUNCH DISRUPT 2026 > INDIA INTRODUCES MERCHANT FEES FOR LARGE UPI TRANSACTIONS TO ENSURE FINANCIAL SUSTAINABILITY > FIREFOX 156 ENHANCES PDF VIEWER PERFORMANCE WITH 45% FASTER STARTUP > EVVY SECURES $40M TO ADVANCE WOMEN'S HEALTH RESEARCH VIA VAGINAL MICROBIOME DATA > GLOBAL BOND YIELDS REACH 2008-LEVEL PEAKS, IMPACTING MAJOR BORROWERS > TECHCRUNCH DISRUPT 2026 EXHIBIT OPPORTUNITIES CLOSING IN FOUR DAYS > PANEL: AN AGENT-DRIVEN RESEARCH WORKSPACE WITH CUSTOMIZABLE PANES> PROFOUND ACHIEVES UNICORN STATUS WITH $180M SERIES D FUNDING IN 7 MONTHS > WONDER EXPANDS FOOD DELIVERY NETWORK WITH $425M DOORDASH PARTNERSHIP > AI-POWERED CAMERA APP DEVELOPED BY FORMER TIKTOK EXECUTIVES AIMS TO ENHANCE PORTRAIT PHOTOGRAPHY SKILLS > SCALING STARTUPS FROM PROTOTYPE TO PRODUCTION: INSIGHTS FROM TECHCRUNCH DISRUPT 2026 > INDIA INTRODUCES MERCHANT FEES FOR LARGE UPI TRANSACTIONS TO ENSURE FINANCIAL SUSTAINABILITY > FIREFOX 156 ENHANCES PDF VIEWER PERFORMANCE WITH 45% FASTER STARTUP > EVVY SECURES $40M TO ADVANCE WOMEN'S HEALTH RESEARCH VIA VAGINAL MICROBIOME DATA > GLOBAL BOND YIELDS REACH 2008-LEVEL PEAKS, IMPACTING MAJOR BORROWERS > TECHCRUNCH DISRUPT 2026 EXHIBIT OPPORTUNITIES CLOSING IN FOUR DAYS > PANEL: AN AGENT-DRIVEN RESEARCH WORKSPACE WITH CUSTOMIZABLE PANES