CVE-2026-2764-but-with-wasm

CVE-2026-2764, pero con wasm Estado: análisis + PoC validado. Weaponización de la primitiva en curso. Una cadena estilo WasmBlazeFox construida sobre un bug de 2026 esta vez: CVE-2026-2764, una «miscompilación JIT + use-after-free» de IonMonkey/baseline en el componente JavaScript Engine: JIT,...

CVE-2024-29943-but-with-wasm

CVE-2024-29943, pero con wasm Una cadena de explotación de extremo a extremo para CVE-2024-29943 que logra ejecución de código nativo arbitrario introduciendo shellcode en la página de código JIT de WebAssembly de SpiderMonkey como inmediatos f64.const — sin ROP, sin VirtualProtect, sin toolchain...

CVE-2019-9810

CVE-2019-9810 Windows 版 Firefox 利用程序 CVE-2019-9810 是一个由 Richard Zhu 和 Amat Cama 在 Pwn2Own 2019 上发现并利用的漏洞。它影响了 Mozilla 的 JavaScript 引擎 Spidermonkey，并被用于实现渲染进程的攻破。 该问题已于大约两个月前在 mfsa2019-09 中修复。 问题概述 简而言之，该漏洞使得边界检查判定为冗余并被优化掉，从而允许代码访问越界内存。问题本身出在 Ion 管道的别名分析阶段。下图展示了 GVN...

CVE-2019-17026-Exploit

CVE-2019-17026 - 一个 Firefox JIT 漏洞 原始漏洞由 奇虎360 在野外捕获。 漏洞利用由 maxpl0it 编写。 适用于 Firefox 72.0.1 这是针对 CVE-2190-17026 的漏洞利用： IonMonkey 类型混淆，涉及 StoreElementHole 和 FallibleStoreElement 此漏洞利用不包含沙箱逃逸，因此测试时需要将 about:config 中的 security.sandbox.content.level 属性设置为 0。理论上可以通过 PAC 将本漏洞与 CVE-2020-0674 链式利用，以在...

Exploit for Use After Free in Mozilla Firefox

CVE-2026-2764, but with wasm Status: analysis + validated P...

Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within IonMonkey when...

EUVD-2019-19157

Malware in sbrugna...

Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987437 advisory. On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerabilit...

EUVD-2025-22372

Malicious code in bioql PyPI...

ROS-20250827-09

Vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. operation outside of the memory buffer. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality, integrity,...

ROS-20250827-08

Vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. operation outside of the memory buffer. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality, integrity,...

Linux Distros Unpatched Vulnerability : CVE-2019-9795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability where type-confusion in the IonMonkey just-in-time JIT compiler could potentially be used by malicious JavaScript to trigger a potentially...

Linux Distros Unpatched Vulnerability : CVE-2019-9810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerabilit...

firefox: thunderbird: JavaScript engine only wrote partial return value to stack

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...

firefox: thunderbird: JavaScript engine only wrote partial return value to stack

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...

firefox: thunderbird: JavaScript engine only wrote partial return value to stack

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...

firefox: thunderbird: JavaScript engine only wrote partial return value to stack

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...

firefox: thunderbird: JavaScript engine only wrote partial return value to stack

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...

firefox: thunderbird: JavaScript engine only wrote partial return value to stack

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...

Linux Distros Unpatched Vulnerability : CVE-2025-8027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This...