[UPDATE] [hoch] Mozilla Firefox und Thunderbird: Mehrere Schwachstellen

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-13 10:09 UTC
  • Importiert: 2026-10-14 10:29 UTC
  • CVSS: 10.0
  • Quelle-ID: cert_bund
  • uid_hash: 1212bbf74aee18fda36f8b4d94086b865bf228698d5fff321ee6bd22afa2a2c2

Inhalt

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Thunderbird ausnutzen, um Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, sensible Informationen offenzulegen, Daten zu manipulieren, Spoofing-Angriffe durchzuführen, möglicherweise durch Speicherbeschädigungen beliebigen Code auszuführen oder Denial-of-Service-Zustände herbeizuführen.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-16365

CRITICAL

10

HIGH

8.8

2026-07-21

CVE-2026-16371

CRITICAL

10

HIGH

8.8

2026-07-21

CVE-2026-74952

CRITICAL

10

HIGH

8.8

2026-08-18

CVE-2026-75874

CRITICAL

10

CRITICAL

10

2026-08-18

CVE-2026-84117

CRITICAL

10

HIGH

8.8

2026-09-01

CVE-2026-84118

CRITICAL

10

MEDIUM

5.4

2026-09-01

CVE-2026-84119

CRITICAL

10

CRITICAL

9.6

2026-09-01

CVE-2026-84120

CRITICAL

10

MEDIUM

5.4

2026-09-01

CVE-2026-84121

CRITICAL

10

CRITICAL

9.6

2026-09-01

CVE-2026-84122

CRITICAL

10

MEDIUM

5.4

2026-09-01

CVE-2026-84123

CRITICAL

10

HIGH

8.8

2026-09-01

CVE-2026-84124

CRITICAL

10

MEDIUM

5.4

2026-09-01

CVE-2026-84125

CRITICAL

10

MEDIUM

5.4

2026-09-01

CVE-2026-84126

CRITICAL

10

MEDIUM

4.3

2026-09-01

CVE-2026-84127

CRITICAL

10

MEDIUM

4.3

2026-09-01

CVE-2026-84128

CRITICAL

10

HIGH

8.8

2026-09-01

CVE-2026-84129

CRITICAL

10

CRITICAL

9.8

2026-09-01

CVE-2026-84130

CRITICAL

10

HIGH

7.5

2026-09-01

CVE-2026-84131

CRITICAL

10

HIGH

8.8

2026-09-01

CVE-2026-84132

CRITICAL

10

HIGH

7.5

2026-09-01

CVE-2026-84133

CRITICAL

10

CRITICAL

9.8

2026-09-01

CVE-2026-84134

CRITICAL

10

CRITICAL

9.8

2026-09-01

CVE-2026-84135

CRITICAL

10

CRITICAL

9.8

2026-09-01

CVE-2026-84136

CRITICAL

10

CRITICAL

9.8

2026-09-01

CVE-2026-84137

CRITICAL

10

CRITICAL

9.8

2026-09-01

CVE-2026-84138

CRITICAL

10

CVE-2026-84139

CRITICAL

10

CVE-2026-84140

CRITICAL

10

CVE-2026-84141

CRITICAL

10

CVE-2026-84142

CRITICAL

10

CVE-2026-84143

CRITICAL

10

CRITICAL

9.8

2026-09-01

CVE-2026-84144

CRITICAL

10

CVE-2026-84145

CRITICAL

10

HIGH

7.5

2026-09-01

CVE-2026-84637

CRITICAL

10

CVE-2026-84639

CRITICAL

10

CRITICAL

9.1

2026-09-01

CVE-2026-84640

CRITICAL

10

HIGH

7.5

2026-09-01

CVE-2026-84641

CRITICAL

10

CVE-2026-84642

CRITICAL

10

Externe Referenzen

Bezeichnung Typ CVE Quelle

Red Hat Security Advisory RHSA-2026:67129 vom 2026-09-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:67133 vom 2026-09-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:68549 vom 2026-09-17

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:70642 vom 2026-09-23

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:73130 vom 2026-09-29

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:73971 vom 2026-09-30

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:76740 vom 2026-10-06

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:76741 vom 2026-10-06

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:76742 vom 2026-10-06

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:76745 vom 2026-10-06

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:76746 vom 2026-10-06

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:76894 vom 2026-10-06

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:76895 vom 2026-10-07

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:77610 vom 2026-10-07

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:77627 vom 2026-10-08

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:77631 vom 2026-10-08

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:77632 vom 2026-10-07

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:80503 vom 2026-10-12

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:81912 vom 2026-10-13

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:81913 vom 2026-10-13

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:82122 vom 2026-10-13

VENDOR - wid_csaf

Amazon Linux Security Advisory ALAS2-2026-3952 vom 2026-09-29

EXTERNAL - wid_csaf

Amazon Linux Security Advisory ALAS2FIREFOX-2026-065 vom 2026-09-29

EXTERNAL - wid_csaf

Amazon Linux Security Advisory ALAS2FIREFOX-2026-066 vom 2026-10-13

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:67129 vom 2026-09-27

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:67133 vom 2026-09-27

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:68549 vom 2026-09-27

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:70642 vom 2026-09-25

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:73130 vom 2026-09-30

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:73971 vom 2026-10-01

EXTERNAL - wid_csaf

IGEL Security Notice ISN-2026-38 vom 2026-09-21

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-54248 vom 2026-09-22

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-67129 vom 2026-09-14

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-67133 vom 2026-09-15

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-68549 vom 2026-09-18

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-70642 vom 2026-09-25

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-73130 vom 2026-09-29

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-73971 vom 2026-10-02

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4770 vom 2026-09-04

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4775 vom 2026-09-07

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:11666-1 vom 2026-09-04

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:11677-1 vom 2026-09-05

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:11678-1 vom 2026-09-05

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:21853-1 vom 2026-09-17

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4140-1 vom 2026-09-16

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:23590-1 vom 2026-09-16

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4156-1 vom 2026-09-16

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4268-1 vom 2026-09-18

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:23784-1 vom 2026-09-21

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6481 vom 2026-09-03

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6483 vom 2026-09-04

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-82 vom 2026-09-01

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-83 vom 2026-09-01

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-84 vom 2026-09-01

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-85 vom 2026-09-01

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-86 vom 2026-09-01

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-87 vom 2026-09-01

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-88 vom 2026-09-01

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss