Firefox RCE: visit a web page, attacker gets shell

twitter.com

7 pointshosteur4 comments

Casual Firefox RCE by visiting a web page and the attacker now has remote access to your machine via a shell.

And no-one cares. (You really should care and delete Firefox.)

Yeah. This is like the worst possible vulnerability.

> And no-one cares.

Probably because there's no (public) disclosure and no CVE. From what I've googled, there's literally nothing about this aside from the tweet.

probably bs since he literally shows himself running nc to get the shell

outside intrusion to lan is still bad but you can block it in ublock origin