Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Yang Kang

Researcher from360 ATA
#16969of 60,401
18.4Total CVSS
Vulnerabilities · 2
High
1
Critical
1
PT-2022-1782
2022-03-05
8.8
CVE-2022-26485
Mozilla
Firefox Esr
The issue is related to the use of memory after it has been freed, specifically when removing an XSLT parameter during processing, which could lead to an exploitable use-after-free. There have been reports of attacks in the wild abusing this flaw, allowing a remote attacker to potentially execute arbitrary code.
PT-2022-1783
2022-03-05
9.6
CVE-2022-26486
Mozilla
Firefox For Android
The issue is related to a use-after-free vulnerability in the WebGPU interface, which can be exploited by a remote attacker to execute arbitrary code. There have been reports of attacks in the wild abusing this flaw. The vulnerability is associated with the WebGPU IPC framework, where an unexpected message could lead to a use-after-free and exploitable sandbox escape.