References https://blog.nsfocus.net/analysis-protection-firefox-vulnerability/ https://www.sentinelone.com/vulnerability-database/cve-2026-6784/ https://www.leavesongs.com/PENETRATION/firefox-remote-command-execute.html https://ti.qianxin.com/uploads/2019/06/19/19b9f60e2fcb4ad7513c936538f6afb1.pdf https://vuldb.com/zh/vuln/358440 https://www.sxxdckj.com/cms/a/Mozilla-Firefox-yuan-cheng-dai-ma-zhi-xing-lou-dong.html https://nic.seu.edu.cn/info/1047/1259.htm https://www.ctfiot.com/307147.html https://www.cnvd.org.cn/patchInfo/show/748986 https://www.threatlocker.com/blog/firefox-remote-code-execution https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/ https://www.hkcert.org/security-bulletin/mozilla-firefox-remote-code-execution-vulnerability_20250220 https://www.broadcom.com/support/security-center/protection-bulletin/cve-2024-9680-mozilla-firefox-remote-code-execution-vulnerability https://kqx.io/post/firefox0day/
Related VulnerabilitiesPoCpollbot-redirect: Mozilla Pollbot - Open Redirect(CVE-2025-4087)Firefox和Thunderbird XPath解析空值检查不足导致内存损坏漏洞(CVE-2025-4083)Firefox和Thunderbird进程隔离漏洞(CVE-2025-4082)macOS版Firefox和Thunderbird WebGL着色器越界读取漏洞可导致权限提升(CVE-2025-3034)Firefox和Thunderbird内存安全漏洞可导致任意代码执行Mozilla Firefox WebExtensions SettingContent-ms策略绕过漏洞Mozilla Firefox CVE-2022-26485 XSLT 进程释放后重利用漏洞Mozilla多个产品越界写入漏洞(CVE-2022-28281)Mozilla多个产品内存释放后再次引用漏洞(CVE-2022-28282)Mozilla多个产品UI 层渲染不当漏洞(CVE-2022-28286)Mozilla多个产品越界读取漏洞(CVE-2022-28285)Mozilla Firefox 安全漏洞Mozilla Thunderbird、Firefox ESR和Firefox 缓冲区错误漏洞(CVE-2020-6831)