Mozilla this week patched several high-severity vulnerabilities in its Firefox and Thunderbird products.
Firefox 104 — as well as Firefox ESR 91.13 and 102.2 — patches a high-severity address bar spoofing issue related to XSLT error handling. The flaw, tracked as CVE-2022-38472, could be exploited for phishing.
This article has been indexed from SecurityWeek RSS Feed
Read the original article: