[UPDATE] [hoch] Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-22 12:11 UTC
  • Importiert: 2026-09-24 10:16 UTC
  • CVSS: 10.0
  • Quelle-ID: cert_bund
  • uid_hash: 14129e488bdeefabdf8aa957c07219f5e83474157a87aefc609f1f60d33498fe

Inhalt

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen, einen Denial-of-Service-Zustand herbeizuführen, sensible Informationen offenzulegen, Spoofing-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen oder andere nicht spezifizierte Angriffe durchzuführen.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-2634

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2757

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2758

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2759

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2760

CRITICAL

10

CRITICAL

10

2026-02-24

CVE-2026-2761

CRITICAL

10

CRITICAL

10

2026-02-24

CVE-2026-2762

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2763

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2764

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2765

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2766

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2767

CRITICAL

10

HIGH

8.8

2026-02-24

CVE-2026-2768

CRITICAL

10

CRITICAL

10

2026-02-24

CVE-2026-2769

CRITICAL

10

HIGH

8.8

2026-02-24

CVE-2026-2770

CRITICAL

10

HIGH

8.8

2026-02-24

CVE-2026-2771

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2772

CRITICAL

10

HIGH

8.8

2026-02-24

CVE-2026-2773

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2774

CRITICAL

10

HIGH

8.8

2026-02-24

CVE-2026-2775

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2776

CRITICAL

10

CRITICAL

10

2026-02-24

CVE-2026-2777

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2778

CRITICAL

10

CRITICAL

10

2026-02-24

CVE-2026-2779

CRITICAL

10

CRITICAL

9.8

2026-02-24

CVE-2026-2780

CRITICAL

10

HIGH

8.8

2026-02-24

CVE-2026-2781

CRITICAL

10

HIGH

8.8

2026-02-24

CVE-2026-2782

CRITICAL

10

CVE-2026-2783

CRITICAL

10

CVE-2026-2784

CRITICAL

10

CVE-2026-2785

CRITICAL

10

CVE-2026-2786

CRITICAL

10

CVE-2026-2787

CRITICAL

10

CVE-2026-2788

CRITICAL

10

CVE-2026-2789

CRITICAL

10

CVE-2026-2790

CRITICAL

10

CVE-2026-2791

CRITICAL

10

CVE-2026-2792

CRITICAL

10

CVE-2026-2793

CRITICAL

10

CVE-2026-2794

CRITICAL

10

CVE-2026-2795

CRITICAL

10

CVE-2026-2796

CRITICAL

10

CVE-2026-2797

CRITICAL

10

CVE-2026-2798

CRITICAL

10

CVE-2026-2799

CRITICAL

10

CVE-2026-2800

CRITICAL

10

CVE-2026-2801

CRITICAL

10

CVE-2026-2802

CRITICAL

10

CVE-2026-2803

CRITICAL

10

CVE-2026-2804

CRITICAL

10

CVE-2026-2805

CRITICAL

10

CVE-2026-2806

CRITICAL

10

CVE-2026-2807

CRITICAL

10

Externe Referenzen

Bezeichnung Typ CVE Quelle

Oracle Linux Security Advisory ELSA-2026-3338 vom 2026-02-27

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-3339 vom 2026-02-27

EXTERNAL - wid_csaf

Red Hat Security Advisory RHSA-2026:3338 vom 2026-02-25

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3339 vom 2026-02-25

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3361 vom 2026-02-25

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3491 vom 2026-03-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3492 vom 2026-03-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3493 vom 2026-03-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3494 vom 2026-03-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3495 vom 2026-03-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3496 vom 2026-03-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3497 vom 2026-03-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3515 vom 2026-03-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3516 vom 2026-03-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3517 vom 2026-03-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3976 vom 2026-03-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3978 vom 2026-03-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3979 vom 2026-03-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3980 vom 2026-03-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3981 vom 2026-03-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3982 vom 2026-03-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3983 vom 2026-03-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:3984 vom 2026-03-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:4022 vom 2026-03-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:4260 vom 2026-03-11

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:4432 vom 2026-03-12

VENDOR - wid_csaf

Amazon Linux Security Advisory ALAS2-2026-3198 vom 2026-03-19

EXTERNAL - wid_csaf

Amazon Linux Security Advisory ALAS2FIREFOX-2026-054 vom 2026-03-19

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:3338 vom 2026-02-26

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:3339 vom 2026-02-26

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:3361 vom 2026-02-26

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:3515 vom 2026-03-03

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:3516 vom 2026-03-03

EXTERNAL - wid_csaf

IGEL Security Notice ISN-2026-05 vom 2026-03-03

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-13977 vom 2026-06-11

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-19704 vom 2026-06-16

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-22708 vom 2026-06-15

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-24983 vom 2026-06-30

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-26551 vom 2026-06-30

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-3361 vom 2026-02-26

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-3515 vom 2026-03-03

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-3516 vom 2026-03-03

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-3517 vom 2026-03-03

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-3984 vom 2026-06-11

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-54248 vom 2026-09-22

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-8427 vom 2026-06-11

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4495 vom 2026-02-28

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4496 vom 2026-03-02

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4508 vom 2026-03-25

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6148 vom 2026-02-25

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6149 vom 2026-02-26

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6152 vom 2026-02-28

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:10257-1 vom 2026-02-27

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:10242-1 vom 2026-02-25

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:0740-1 vom 2026-03-02

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:0814-1 vom 2026-03-05

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:0812-1 vom 2026-03-05

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:0813-1 vom 2026-03-05

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:0871-1 vom 2026-03-12

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:0880-1 vom 2026-03-12

EXTERNAL - wid_csaf

Ubuntu Security Notice USN-8071-1 vom 2026-03-04

EXTERNAL - wid_csaf

Ubuntu Security Notice USN-8071-2 vom 2026-03-05

EXTERNAL - wid_csaf

MFSA 2026-12 Security Vulnerabilities fixed in Firefox for iOS 147.4 vom 2026-02-24

EXTERNAL - wid_csaf

MFSA 2026-13 Security Vulnerabilities fixed in Firefox 148 vom 2026-02-24

EXTERNAL - wid_csaf

MFSA 2026-14 Security Vulnerabilities fixed in Firefox ESR 115.33 vom 2026-02-24

EXTERNAL - wid_csaf

MFSA 2026-15 Security Vulnerabilities fixed in Firefox ESR 140.8 vom 2026-02-24

EXTERNAL - wid_csaf

MFSA 2026-16 Security Vulnerabilities fixed in Thunderbird 148 vom 2026-02-24

EXTERNAL - wid_csaf

MFSA 2026-17 Security Vulnerabilities fixed in Thunderbird 140.8 vom 2026-02-24

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss