Threat video1:00
Firefox 152 MFSA 2026-57: 39 Flaws, Sandbox Escapes
MFSA 2026-57 fixes 39 Firefox 152 flaws, four of them sandbox escapes. 9 detection rules, 20 IOCs, 18 ATT&CK techniques and a free Splunk SPL rule.
Read the full threat intel for Firefox 152 security advisory →
Chapters
- 0:00The hook39 Firefox flaws patched in version 152.
- 0:05The storyMozilla disclosed flaws enabling sandbox escape.
- 0:12Attack pathVictims lured to pages trigger memory flaws.
- 0:28AttributionNo threat actor: this was defensive research.
- 0:32Indicators of compromise5 indicators to hunt: 1 registry key and 4 package names.
- 0:38MITRE ATT&CK techniques18 ATT&CK techniques, from reconnaissance to impact.
- 0:42Remediation4 steps now: Update Firefox to version 152 on all desktop endpoints immediately.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:0039 Firefox flaws patched in version 152.
0:05Mozilla disclosed flaws enabling sandbox escape.
0:09Memory corruption chains the attack path.
0:12Victims lured to pages trigger memory flaws.
0:15Four sandbox escapes unlock system access.
0:18Memory corruption in HTTP and WebGPU.
0:22Privilege escalation harvests browser credentials.
0:28No threat actor: this was defensive research.
0:325 indicators to hunt: 1 registry key and 4 package names.
0:3818 ATT&CK techniques, from reconnaissance to impact.
0:434 steps now: Update Firefox to version 152 on all desktop endpoints immediately.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.