Security researchers at Nebula Security disclosed CVE-2026-10702, a high-severity Firefox JIT (Just-In-Time compiler) vulnerability that enables arbitrary code execution through a single malicious webpage visit, requiring no user interaction. The flaw affected both Firefox and Tor Browser, with Mozilla addressing it in Firefox version 151.0.3. The zero-click nature of the exploit makes it particul
Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to compromise Tor Browser. Tracked as CVE-2026-10702, the bug provides arbitrary code execution inside the browser's renderer process. Mozilla rated it High and fixed it in the Firefox 151.0.3 update. "No settings or additional user interaction are required," Eten Zou,
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
