Back Securityaffairs.Co

Firefox bug CVE-2026-6770 enabled cross

Securityaffairs.Co •Pierluigi Paganini • April 27, 2026

CVE-2026-6770 let attackers fingerprint Firefox and Tor users, even in Private mode. Firefox 150 and Tor Browser 15.0.10 fixed it. A vulnerability, tracked as CVE-2026-6770, allowed attackers to fingerprint Firefox users, even in Private Browsing, and also impacted the Tor Browser. The flaw worked even when Tor’s New Identity feature was used, bypassing protections meant […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Firefox Bug CVE-2026-6770 Allows Tracking of Tor Users A newly discovered vulnerability, CVE-2026-6770, allows attackers to fingerprint users of Firefox and Tor browsers, even in Private Browsing mode. The flaw, identified in the IndexedDB API, enables the creation of a database that can be queried to track users across different sessions. This vulnerability affects both standard and private browsing modes in Firefox and the Tor Browser, undermining the privacy protections intended by Tor's New Identity feature. Mozilla has released patches in Firefox 150 and Tor Browser 15.0.10 to address this issue. The bug went largely unnoticed amid other security discussions, despite its significant implications for user privacy. Users are advised to update their browsers promptly to mitigate the risk of being tracked. The vulnerability was publicly disclosed on April 21, 2026, and the patches were released shortly thereafter. 3 sources 58

Extracted Entities

Firefox bug CVE-2026-6770 enabled cross

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (2)