Firefox 159 patches 40+ sec-high bugs as Mozilla overhauls CVE publishing
moyix · x · 2026-11-04
Mozilla's Firefox 159 advisory discloses 40+ sec-high vulnerabilities reported by an outside team, spanning same-origin policy bypasses, sandbox escapes, use-after-frees in the JS engine, and privilege escalations. Mozilla also now issues a separate CVE per memory-safety bug instead of rolling them into one. The reporting team called it one of the smoothest vuln reporting processes they've had.
Related event: Firefox 159 Patches 41 High-Severity Bugs Found by AI Agents(2 posts)→
More from Safety
- ARTEX red team tool's Docker image found to contain an unauthorized backdoor — Kyrannio · 2026-11-04
- India's CERT-In gets Anthropic's Claude 'Mythos' to probe cybersecurity flaws, skeptics unimpressed — kingslyj · 2026-11-04
- Ternary Logic proposal: enforcing AI safety at the architecture level — MoralLogs · 2026-11-04
- Cambridge's David Krueger: A global AI pause needs coordination, not trust — DavidSKrueger · 2026-11-04
- Security advisory: run AI agents in managed cloud environments, not employee endpoints — amasad · 2026-11-04
- Man who siphoned 4M accounts' credits from AI platform reselling them gets suspended sentence — 葬AI · 2026-11-04