CVE-2023-28164 - Exploiting URL Drag-and-Drop From Cross-Origin iframes — User Confusion and Website Spoofing in Firefox < 111
---
Every year, browser bugs open the door to sneaky attacks—and CVE-2023-28164 is a classic case where a small drag-and-drop error led to big
CVE-2023-28162 - Deep Dive Into the Firefox AudioWorklet Vulnerability
In early 2023, researchers found a critical bug in Mozilla Firefox, Firefox ESR, and Thunderbird, officially tracked as CVE-2023-28162. This vulnerability revolved around the implementation
CVE-2023-25752 - A Deep Dive Into Firefox and Thunderbird Throttled Stream Vulnerability
In early 2023, a new vulnerability was discovered in Mozilla’s popular web browser, Firefox, and its email client Thunderbird. This flaw, tracked as CVE-2023-25752,
CVE-2023-23597 - How a Compromised Firefox Web Process Could Read Your Files
In January 2023, Mozilla patched a critical vulnerability in Firefox tracked as CVE-2023-23597. If you’re running Firefox 108 or earlier, your data might be
CVE-2023-23599 - How "Copy as cURL" in Firefox Exposed Users to Hidden Command Exploits
CVE-2023-23599 is a significant vulnerability that quietly lurked in Firefox, Firefox ESR, and Thunderbird before their respective updates in early 2023. This issue didn’t
Episode
00:00:00
00:00:00