295 matches found
CVE-2026-2764-but-with-wasm
CVE-2026-2764, но с wasm Статус: анализ + подтверждённый PoC. Доведение примитива до эксплойта в процессе. Цепочка в стиле WasmBlazeFox, на этот раз на баге 2026 года: CVE-2026-2764, IonMonkey/baseline «JIT-мискомпиляция + use-after-free» в компоненте JavaScript Engine: JIT, исправленная в Firefo...
CVE-2024-29943-but-with-wasm
CVE-2024-29943, но с wasm Сквозная цепочка эксплуатации для CVE-2024-29943 , достигающая выполнения произвольного нативного кода путём контрабанды шелл-кода в страницу JIT-кода WebAssembly SpiderMonkey в виде непосредственных значений f64.const — без ROP, без VirtualProtect, без внешнего тулчейна...
CVE-2019-9810
Exploit CVE-2019-9810 pour Firefox sur Windows CVE-2019-9810 est une vulnérabilité découverte et exploitée lors du Pwn2Own 2019 par Richard Zhu et Amat Cama. Elle affecte le moteur JavaScript de Mozilla, Spidermonkey, et a été utilisée pour compromettre le processus de rendu. Le problème a été...
CVE-2019-11707-from-an-IonMonkey-type-confusion-to-SYSTEM-
CVE-2019-11707 WINDOWS EXPLOIT POC Полное исследование здесь: https://blog.grunt.ar/bin-exploitation/binary-gecko-academy/cve-2019-11707-firefox-ionmonkey-to-system-en/ Видео POC https://youtu.be/5Q5SkR7qslg...
CVE-2019-17026-Exploit
CVE-2019-17026 - Ошибка JIT в Firefox Оригинальная ошибка была обнаружена в реальной эксплуатации компанией Qihoo 360. Эксплойт написан maxpl0it. Работает на Firefox 72.0.1 Это эксплойт для CVE-2190-17026: Путаница типов в IonMonkey с участием StoreElementHole и FallibleStoreElement Этот эксплойт...
Exploit for Use After Free in Mozilla Firefox
CVE-2026-2764, but with wasm Status: analysis + validated P...
Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within IonMonkey when...
EUVD-2019-19157
Malware in sbrugna...
Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987437)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987437 advisory. On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerabilit...
EUVD-2025-22372
Malicious code in bioql PyPI...
ROS-20250827-09
Vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. operation outside of the memory buffer. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality, integrity,...
ROS-20250827-08
Vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. operation outside of the memory buffer. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality, integrity,...
Linux Distros Unpatched Vulnerability : CVE-2019-9795
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability where type-confusion in the IonMonkey just-in-time JIT compiler could potentially be used by malicious JavaScript to trigger a potentially...
Linux Distros Unpatched Vulnerability : CVE-2019-9810
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerabilit...
firefox: thunderbird: JavaScript engine only wrote partial return value to stack
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...
firefox: thunderbird: JavaScript engine only wrote partial return value to stack
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...
firefox: thunderbird: JavaScript engine only wrote partial return value to stack
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...
firefox: thunderbird: JavaScript engine only wrote partial return value to stack
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...
firefox: thunderbird: JavaScript engine only wrote partial return value to stack
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...
firefox: thunderbird: JavaScript engine only wrote partial return value to stack
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...