Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um potenziell beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
[UPDATE] [hoch] Mozilla Firefox und Firefox ESR: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-09-22 12:11 UTC
- Importiert: 2026-09-24 10:16 UTC
- CVSS: 9.6
- Quelle-ID:
cert_bund - uid_hash:
a87b06f94fdd34cb93aa6e6e25e509f61727859ce972c05b501476fa3d516126
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9.6 |
HIGH |
7.5 |
2026-04-28 |
|||
CRITICAL |
9.6 |
CRITICAL |
9.6 |
2026-04-28 |
|||
CRITICAL |
9.6 |
HIGH |
8.8 |
2026-04-28 |
|||
CRITICAL |
9.6 |
HIGH |
7.5 |
2026-04-28 |
|||
CRITICAL |
9.6 |
HIGH |
7.5 |
2026-04-28 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
Amazon Linux Security Advisory ALAS2FIREFOX-2026-058 vom 2026-05-14 |
EXTERNAL | - | wid_csaf |
Rocky Linux Security Advisory RLSA-2026:19588 vom 2026-05-23 |
EXTERNAL | - | wid_csaf |
Rocky Linux Security Advisory RLSA-2026:20586 vom 2026-05-29 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
Oracle Linux Security Advisory ELSA-2026-19153 vom 2026-07-21 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-19157 vom 2026-07-17 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-19370 vom 2026-06-29 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-19588 vom 2026-05-25 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-20586 vom 2026-05-27 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-22708 vom 2026-06-15 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-24983 vom 2026-06-30 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-26551 vom 2026-06-30 |
EXTERNAL | - | wid_csaf |
Oracle Linux Security Advisory ELSA-2026-54248 vom 2026-09-22 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
openSUSE Security Update OPENSUSE-SU-2026:10687-1 vom 2026-05-06 |
EXTERNAL | - | wid_csaf |
openSUSE Security Update OPENSUSE-SU-2026:10668-1 vom 2026-05-05 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
Oracle Linux Security Advisory ELSA-2026-50280 vom 2026-05-26 |
EXTERNAL | - | wid_csaf |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |