Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Speicherbeschädigungen zu verursachen, Sicherheitsmaßnahmen zu umgehen und aus der Sandbox auszubrechen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und Denial-of-Service-Zustände auszulösen.
[UPDATE] [hoch] Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-08-17 09:12 UTC
- Importiert: 2026-08-19 09:30 UTC
- Quelle-ID:
cert_bund - uid_hash:
4c2685ed0207966a6e81431971780886ddc4cbf89bed21d0d016c86a2b1eaa4e
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
HIGH |
8.8 |
2026-06-16 |
||||
HIGH |
HIGH |
8.1 |
2026-06-16 |
||||
HIGH |
HIGH |
8.8 |
2026-06-16 |
||||
HIGH |
HIGH |
8.1 |
2026-06-16 |
||||
HIGH |
CRITICAL |
9.8 |
2026-06-16 |
||||
HIGH |
CRITICAL |
9.6 |
2026-06-16 |
||||
HIGH |
CRITICAL |
9.6 |
2026-06-16 |
||||
HIGH |
CRITICAL |
9.6 |
2026-06-16 |
||||
HIGH |
CRITICAL |
9.6 |
2026-06-16 |
||||
HIGH |
MEDIUM |
5.4 |
2026-06-16 |
||||
HIGH |
MEDIUM |
5.4 |
2026-06-16 |
||||
HIGH |
MEDIUM |
5.3 |
2026-06-16 |
||||
HIGH |
MEDIUM |
5.3 |
2026-06-16 |
||||
HIGH |
MEDIUM |
6.5 |
2026-06-16 |
||||
HIGH |
MEDIUM |
4.3 |
2026-06-16 |
||||
HIGH |
CRITICAL |
9.1 |
2026-06-16 |
||||
HIGH |
HIGH |
7.5 |
2026-06-16 |
||||
HIGH |
MEDIUM |
5.3 |
2026-06-16 |
||||
HIGH |
MEDIUM |
5.3 |
2026-06-16 |
||||
HIGH |
MEDIUM |
5.3 |
2026-06-16 |
||||
HIGH |
MEDIUM |
6.5 |
2026-06-16 |
||||
HIGH |
HIGH |
7.5 |
2026-06-16 |
||||
HIGH |
MEDIUM |
4.7 |
2026-06-16 |
||||
HIGH |
HIGH |
7.5 |
2026-06-16 |
||||
HIGH |
MEDIUM |
4.7 |
2026-06-16 |
||||
HIGH |
HIGH |
7.5 |
2026-06-16 |
||||
HIGH |
CRITICAL |
9.1 |
2026-06-16 |
||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
HIGH |
7.3 |
2026-06-16 |
||||
HIGH |
MEDIUM |
6.5 |
2026-06-16 |
||||
HIGH |
|||||||
HIGH |
HIGH |
8.1 |
2026-06-16 |
||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
Oracle Linux Security Advisory ELSA-2026-29940 vom 2026-06-27 |
EXTERNAL | - | wid_csaf |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
Amazon Linux Security Advisory ALAS2-2026-3795 vom 2026-07-08 |
EXTERNAL | - | wid_csaf |
Amazon Linux Security Advisory ALAS2FIREFOX-2026-062 vom 2026-07-08 |
EXTERNAL | - | wid_csaf |
Rocky Linux Security Advisory RLSA-2026:27717 vom 2026-06-25 |
EXTERNAL | - | wid_csaf |
Rocky Linux Security Advisory RLSA-2026:27733 vom 2026-06-24 |
EXTERNAL | - | wid_csaf |
Rocky Linux Security Advisory RLSA-2026:29940 vom 2026-06-26 |
EXTERNAL | - | wid_csaf |
Rocky Linux Security Advisory RLSA-2026:30846 vom 2026-07-05 |
EXTERNAL | - | wid_csaf |
Rocky Linux Security Advisory RLSA-2026:33445 vom 2026-07-04 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
Oracle Linux Security Advisory ELSA-2026-27717 vom 2026-06-22 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-27733 vom 2026-07-17 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-27734 vom 2026-06-25 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-30846 vom 2026-07-17 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-33445 vom 2026-07-01 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
openSUSE Security Update OPENSUSE-SU-2026:21043-1 vom 2026-06-30 |
EXTERNAL | - | wid_csaf |
openSUSE Security Update OPENSUSE-SU-2026:11052-1 vom 2026-06-19 |
EXTERNAL | - | wid_csaf |
openSUSE Security Update OPENSUSE-SU-2026:21168-1 vom 2026-06-30 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |