Researchers have discovered a vulnerability that could allow threat actors to fingerprint Firefox and Tor users.