Firefox 70

Mozilla released Firefox 70 with the fixes for security vulnerabilities that affected the previous version of Firefox and added Enhanced Tracking Protection (ETP) by default.

Mozilla fixed 9 vulnerabilities including one critical severity bug, 3 high severity bug, and 5 Moderate level vulnerabilities.

More Security Protection with  Firefox Lockwise

Firefox password management tool called Lockwise improved with more security protection and allows you to create, update, and delete your logins and passwords to sync across all your devices.

Integrated breach protection with Lockwise now alerts you about potentially vulnerable passwords and if it’s exposed in any data breach.

Complex password generation lets you create and save strong passwords for new online accounts.

Social tracking protection, which blocks cross-site tracking cookies from sites like Facebook, Twitter, and LinkedIn, is now a standard feature of Enhanced Tracking Protection.”

More Browser Features

Mozilla added more features including address bar indication for Geo-location when a website uses it.

A stand-alone firefox account menu added that helps users to easily access Firefox services such as Monitor and Send.

Google removed EV indicators Chrome version 77. now Firefox step towards it, starting from Firefox 70 all the green lock icons turned to gray.

Padlock before and After

Improvement with a Core Engine component

Mozilla rolled out the WebRender for Windows users by default on Windows desktops with integrated Intel graphics cards and resolution of 1920×1200 or less) for improved graphics rendering.

Also, Firefox for macOS Compositor improvement helps to speed up page load by as much as 22 percent, and reduce resource use for video by up to 37 percent.

Security Updates

Mozilla fixed totally 9 vulnerabilities that affected Firefox 69 and earlier version:

CVE-2019-15903: Heap overflow in expat library in XML_GetCurrentLineNumber
CVE-2019-11757: Use-after-free when creating index updates in IndexedDB
CVE-2019-11758: Potentially exploitable crash due to 360 Total Security
CVE-2019-11759: Stack buffer overflow in HKDF output
CVE-2019-11760: Stack buffer overflow in WebRTC networking 
CVE-2019-11761: Unintended access to a privileged JSONView object 
CVE-2019-11762: document.domain-based origin isolation has same-origin-property violation 
CVE-2019-11763: Incorrect HTML parsing results in XSS bypass technique
CVE-2019-11764: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2

Users can install the new update via the following links or direct Firefox download page.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and Hacking News update.

Leave a Reply