“In the meantime, Android users should use the safer or safest security levels,” Tor said in an update on Thursday. The Android release for Tor won’t be available until this weekend, the project said, because of team travel. “By lines of code, Tor Browser is mostly Firefox - there are some modifications and some additions, but around 95 percent of the code in Tor Browser comes from Firefox.” “If you’ve used Tor, you’ve probably used Tor Browser, and if you’ve used Tor Browser you’ve used Firefox,” they said in a posting. The issue affects Tor, since, as its founders said back in 2016, Firefox is at the heart of the privacy-focused onion browser. The vulnerability, which was disclosed and patched earlier this week, enables cybercriminals to take full control of systems running the vulnerable Firefox versions. The critical flaw (CVE-2019-11707) is a type confusion vulnerability in the Array.pop, which is an array method that is used in JavaScript objects in Firefox. Tor Browser has updated to version 8.5.2, to address a critical security flaw in Mozilla’s Firefox browser that is under active exploit in the wild.

Tor broswer update