« Developers with both Mozilla and Tor have published browser updates that patch a critical Firefox vulnerability being actively exploited to deanonymize people using the privacy service ».

Source : Mozilla and Tor release urgent update for Firefox 0-day under active attack | Ars Technica