A privileged user 's account at Mozilla was compromised back in September 2014 and used to access the company 's database of bugs and known vulnerabilities . This gave the user access to 185 ' non - public ' Firefox bugs , of which the developers define 53 as having been ' severe bugs ' . At least one of these severe vulnerabilities was then found being offered for use on a Russian server , apparently tying back to a cloud - based server . The latest release of Firefox has " fixed all of the vulnerabilities that the attacker knows about and could have used to harm Firefox users . "
A privileged user's account at Mozilla was compromised back in September 2014 and used to access the company's database of bugs and known vulnerabilities. This gave the attackers access to 185 'non-public' Firefox bugs, of which the company define 53 as having been 'severe vulnerabilities'. At least one of these severe vulnerabilities was then found being offered for use on a Russian website, apparently tying back to a Ukraine-based server. The latest release of Firefox has "fixed all of the vulnerabilities that the attacker learned about and could have used to harm Firefox users."