Firefox 159 fixes 41 high-severity flaws found by researchers
Firefox 159.0 fixes 41 vulnerabilities rated high severity, most of them allowing code execution in the browser's renderer process. The flaws were found by outside researchers with support from Mozilla's security team. Users should update the browser to the new version.
What happened
Mozilla released Firefox 159.0 with fixes for 41 high-severity security flaws. Most of the flaws allow code execution in the browser renderer, according to the researchers who found them.
Why it matters
Most of the 41 flaws allow code execution in the process that renders web pages. Outdated browsers keep this risk open on every workstation running Firefox.
What to do
Update Firefox to version 159.0 on all machines and confirm automatic updates are enabled.
For the technical team
- Affected
- Mozilla Firefox · Firefox versions before 159.0; specific versions not listed in the source.
- Exploitation
- No exploitation reported and no proof of concept cited. The flaws were announced as already fixed by researchers @itszn13 and @ky1ebot.
- Fix
- Firefox 159.0.
- Vector
- Component: browser renderer. Type: code execution in the renderer process, in most of the 41 flaws. Exploitation condition not detailed in the source.
- More details
- Announcement posted on X by researcher @itszn13, crediting @ky1ebot as co-discoverer. The researcher cites a Mozilla security team effort to secure Firefox with agents and says more hardening projects are coming. No CVEs cited.
Timeline
Researchers announce Firefox 159.0 ships with fixes for the 41 high-severity flaws.
Sources 1 source
- @itszn13 @itszn13
