importantSYS.SOURCE: The Hacker News• 2026-07-29T17:27:00+05:30

Critical Firefox JIT Flaw Enables Remote Compromise of Tor Browser

#browser security #vulnerability #exploit

A critical Firefox JIT compiler vulnerability (CVE-2026-10702) allows remote code execution through a malicious webpage, compromising Tor Browser without user interaction. The exploit chain, IonStack, combines the browser flaw with a Linux kernel futex vulnerability (CVE-2026-43499) to achieve privilege escalation on Android.

Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to compromise Tor Browser.

Tracked as CVE-2026-10702, the bug provides arbitrary code execution inside the browser's renderer process. Mozilla rated it High and fixed it in the Firefox 151.0.3 update.

"No settings or additional user interaction are required," Eten Zou,

Read original article

*** END OF TRANSMISSION ***

> ADOBE CAMPAIGN CLASSIC CVSS 10.0 CRITICAL VULNERABILITY ENABLES ARBITRARY CODE EXECUTION WITHOUT USER INTERACTION > HIJACKED HOTEL WI-FI NETWORKS EXPLOIT FAKE UPDATES TO DEPLOY SURVEILLANCE MALWARE > TEN CRITICAL ISSUES IMPACTING NAS SYSTEMS > THE PURPOSE AND VALUE OF LIBERAL ARTS EDUCATION IN MODERN CAREER DEVELOPMENT > DEVELOPMENT PIPELINE AS CRITICAL PRODUCTION SYSTEM IN SOFTWARE ENGINEERING > FLINT: A VISUALIZATION LANGUAGE FOR THE AI ERA > CHALLENGES IN MODERATING A MATRIX COMMUNITY: A WEEK-LONG EXPERIENCE > THE CHALLENGE OF EXISTENCE: A MINDFULNESS PRACTICE FOR PRESENT-MOMENT AWARENESS > OPENAI INVESTIGATES MULTIPLE AI AGENT ESCAPES FROM TEST ENVIRONMENTS > RIVIAN SPINOFF ALSO BEGINS E-BIKE DELIVERIES AMID SUPPLY CHAIN CHALLENGES> ADOBE CAMPAIGN CLASSIC CVSS 10.0 CRITICAL VULNERABILITY ENABLES ARBITRARY CODE EXECUTION WITHOUT USER INTERACTION > HIJACKED HOTEL WI-FI NETWORKS EXPLOIT FAKE UPDATES TO DEPLOY SURVEILLANCE MALWARE > TEN CRITICAL ISSUES IMPACTING NAS SYSTEMS > THE PURPOSE AND VALUE OF LIBERAL ARTS EDUCATION IN MODERN CAREER DEVELOPMENT > DEVELOPMENT PIPELINE AS CRITICAL PRODUCTION SYSTEM IN SOFTWARE ENGINEERING > FLINT: A VISUALIZATION LANGUAGE FOR THE AI ERA > CHALLENGES IN MODERATING A MATRIX COMMUNITY: A WEEK-LONG EXPERIENCE > THE CHALLENGE OF EXISTENCE: A MINDFULNESS PRACTICE FOR PRESENT-MOMENT AWARENESS > OPENAI INVESTIGATES MULTIPLE AI AGENT ESCAPES FROM TEST ENVIRONMENTS > RIVIAN SPINOFF ALSO BEGINS E-BIKE DELIVERIES AMID SUPPLY CHAIN CHALLENGES