Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser

A vulnerability in the Firefox JIT compiler, identified as CVE-2026-10702, can be exploited by visiting a malicious webpage, allowing for arbitrary code execution within the browser's renderer process. This flaw was rated as High by Mozilla and has been patched in the Firefox 151.0.3 update. The issue can be triggered without requiring any specific settings or user interaction. The bug was also found to affect the Tor Browser, posing a compromise risk. Nebula Security discovered that the vulnerability could be exploited with a single visit to a malicious webpage.