Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser
Nebula says CVE-2026-10702 lets a malicious webpage compromise Tor Browser and start an Android 17 root chain.
More info