[UPDATE] [hoch] Mozilla Thunderbird, Firefox ESR und Firefox: Mehrere Schwachstellen

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-22 12:11 UTC
  • Importiert: 2026-09-24 10:16 UTC
  • CVSS: 9.8
  • Quelle-ID: cert_bund
  • uid_hash: e1ab3cd90dddc30bf026f0cac9bccb5934cf7a4685e1a24b4188e191e0630f48

Inhalt

Ein Angreifer kann mehrere Schwachstellen in Mozilla Thunderbird, Mozilla Firefox ESR und Mozilla Firefox ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um falsche Informationen darzustellen, und um Sicherheitsvorkehrungen zu umgehen.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-2781

CRITICAL

9.8

HIGH

8.8

2026-02-24

CVE-2026-33626

CRITICAL

9.8

HIGH

7.5

2026-04-20

CVE-2026-6746

CRITICAL

9.8

HIGH

7.5

2026-04-21

CVE-2026-6747

CRITICAL

9.8

HIGH

7.5

2026-04-21

CVE-2026-6748

CRITICAL

9.8

CRITICAL

9.8

2026-04-21

CVE-2026-6749

CRITICAL

9.8

HIGH

7.5

2026-04-21

CVE-2026-6750

CRITICAL

9.8

HIGH

8.8

2026-04-21

CVE-2026-6751

CRITICAL

9.8

HIGH

7.5

2026-04-21

CVE-2026-6752

CRITICAL

9.8

HIGH

7.5

2026-04-21

CVE-2026-6753

CRITICAL

9.8

HIGH

7.5

2026-04-21

CVE-2026-6754

CRITICAL

9.8

HIGH

7.5

2026-04-21

CVE-2026-6755

CRITICAL

9.8

MEDIUM

6.5

2026-04-21

CVE-2026-6756

CRITICAL

9.8

HIGH

7.5

2026-04-21

CVE-2026-6757

CRITICAL

9.8

MEDIUM

6.3

2026-04-21

CVE-2026-6758

CRITICAL

9.8

HIGH

7.5

2026-04-21

CVE-2026-6759

CRITICAL

9.8

HIGH

7.5

2026-04-21

CVE-2026-6760

CRITICAL

9.8

CRITICAL

9.8

2026-04-21

CVE-2026-6761

CRITICAL

9.8

HIGH

8.8

2026-04-21

CVE-2026-6762

CRITICAL

9.8

MEDIUM

6.3

2026-04-21

CVE-2026-6763

CRITICAL

9.8

MEDIUM

6.5

2026-04-21

CVE-2026-6764

CRITICAL

9.8

MEDIUM

6.5

2026-04-21

CVE-2026-6765

CRITICAL

9.8

MEDIUM

5.3

2026-04-21

CVE-2026-6766

CRITICAL

9.8

HIGH

7.5

2026-04-21

CVE-2026-6767

CRITICAL

9.8

MEDIUM

5.3

2026-04-21

CVE-2026-6768

CRITICAL

9.8

CRITICAL

9.8

2026-04-21

CVE-2026-6769

CRITICAL

9.8

CVE-2026-6770

CRITICAL

9.8

CVE-2026-6771

CRITICAL

9.8

CVE-2026-6772

CRITICAL

9.8

CVE-2026-6773

CRITICAL

9.8

CVE-2026-6774

CRITICAL

9.8

CVE-2026-6775

CRITICAL

9.8

CVE-2026-6776

CRITICAL

9.8

CVE-2026-6777

CRITICAL

9.8

CVE-2026-6778

CRITICAL

9.8

CVE-2026-6779

CRITICAL

9.8

CVE-2026-6780

CRITICAL

9.8

CVE-2026-6781

CRITICAL

9.8

CVE-2026-6782

CRITICAL

9.8

CVE-2026-6783

CRITICAL

9.8

CVE-2026-6784

CRITICAL

9.8

CVE-2026-6785

CRITICAL

9.8

CVE-2026-6786

CRITICAL

9.8

Externe Referenzen

Bezeichnung Typ CVE Quelle

Oracle Linux Security Advisory ELSA-2026-19131 vom 2026-07-20

EXTERNAL - wid_csaf

Red Hat Security Advisory RHSA-2026:10757 vom 2026-04-27

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:10766 vom 2026-04-27

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:10767 vom 2026-04-27

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:12285 vom 2026-04-30

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:13537 vom 2026-05-04

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:15892 vom 2026-05-11

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:17477 vom 2026-05-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:17687 vom 2026-05-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:17688 vom 2026-05-15

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:17689 vom 2026-05-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:17690 vom 2026-05-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19041 vom 2026-05-19

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19131 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19201 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19348 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19461 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19462 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19463 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19464 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19465 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19466 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19467 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19468 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19469 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19542 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19655 vom 2026-05-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19704 vom 2026-05-20

VENDOR - wid_csaf

Amazon Linux Security Advisory ALAS2-2026-3304 vom 2026-05-26

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:10757 vom 2026-04-28

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:10766 vom 2026-04-30

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:10767 vom 2026-04-28

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:12285 vom 2026-05-07

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:13537 vom 2026-05-07

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:15892 vom 2026-05-13

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:19201 vom 2026-05-20

EXTERNAL - wid_csaf

PoC CVE-2026-33626 vom 2026-05-14

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-10757 vom 2026-04-28

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-10766 vom 2026-04-28

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-10767 vom 2026-04-28

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-12285 vom 2026-05-01

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-13537 vom 2026-05-06

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-13977 vom 2026-06-11

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-15892 vom 2026-05-11

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-19131 vom 2026-07-20

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-19348 vom 2026-06-27

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-19704 vom 2026-06-16

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-22708 vom 2026-06-15

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-24983 vom 2026-06-30

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-26551 vom 2026-06-30

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-3984 vom 2026-06-11

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-54248 vom 2026-09-22

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-8427 vom 2026-06-11

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4546 vom 2026-04-23

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4549 vom 2026-04-26

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4694 vom 2026-07-22

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6290 vom 2026-05-22

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:20621-1 vom 2026-04-27

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:10610-1 vom 2026-04-25

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:20664-1 vom 2026-05-04

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:21383-1 vom 2026-04-28

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:1650-1 vom 2026-04-29

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:1649-1 vom 2026-04-29

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:1741-1 vom 2026-05-07

EXTERNAL - wid_csaf

National Vulnerability Database CVE-2026-6748 vom 2026-04-22

NVD - wid_csaf

National Vulnerability Database CVE-2026-6750 vom 2026-04-22

NVD - wid_csaf

Debian Security Advisory DSA-6229 vom 2026-04-24

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-30 vom 2026-04-21

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-31 vom 2026-04-21

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-32 vom 2026-04-21

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-33 vom 2026-04-21

EXTERNAL - wid_csaf

Mozilla Security Advisory mfsa2026-34 vom 2026-04-21

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss