Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox ESR, Mozilla Firefox und Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher spezifizierte Angriffe zu starten.
[UPDATE] [hoch] Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-20 10:51 UTC
- Importiert: 2026-10-21 10:18 UTC
- Quelle-ID:
cert_bund - uid_hash:
4697aad8e2b8fbfc850c26ab5a3f420385a573eab59fc17b889dbfa19123454c
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
HIGH |
8.1 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
CRITICAL |
9.6 |
2026-09-29 |
||||
HIGH |
HIGH |
8.1 |
2026-09-29 |
||||
HIGH |
CRITICAL |
9.6 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
CRITICAL |
9.6 |
2026-09-29 |
||||
HIGH |
CRITICAL |
9.1 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
MEDIUM |
4.3 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
CRITICAL |
9.6 |
2026-09-29 |
||||
HIGH |
HIGH |
8.1 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
CRITICAL |
9.6 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
CRITICAL |
9.6 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
CRITICAL |
9.6 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
MEDIUM |
4.3 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
HIGH |
8.8 |
2026-09-29 |
||||
HIGH |
CRITICAL |
9.6 |
2026-09-29 |
||||
HIGH |
|||||||
HIGH |
CRITICAL |
9.8 |
2026-09-29 |
||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
Oracle Linux Security Advisory ELSA-2026-80674 vom 2026-10-12 |
EXTERNAL | - | wid_csaf |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
Amazon Linux Security Advisory ALAS2FIREFOX-2026-066 vom 2026-10-13 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-76761 vom 2026-10-08 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-76764 vom 2026-10-07 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-76850 vom 2026-10-09 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-80694 vom 2026-10-13 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
openSUSE Security Update OPENSUSE-SU-2026:11917-1 vom 2026-10-03 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |