Mozilla Rushes to Patch WebP Critical Zero-Day Exploit in Firefox and Thunderbird

Mozilla on Tuesday released security updates to resolve a critical zero-day vulnerability in Firefox and Thunderbird that has been actively exploited in the wild, a day after Google released a fix for the issue in its Chrome browser.
The shortcoming, assigned the identifier CVE-2023-4863, is a heap buffer overflow flaw in the WebP image format that could result in arbitrary code execution when

actively exploited browser buffer chrome critical cve cve-2023-4863 exploit exploited firefox fix google issue mozilla patch security security updates thunderbird tuesday updates vulnerability webp zero-day zero-day exploit zero-day vulnerability