Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-100786

Опубликовано: 29 сент. 2026
Источник: debian
EPSS Низкий

Описание

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed157.0-1package
firefox-esrfixed153.4.0esr-1package
thunderbirdfixed1:153.4.0esr-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100786

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100786

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100786

EPSS

Процентиль: 25%
0.00319
Низкий

Связанные уязвимости

CVSS3: 9.6
ubuntu
около 1 месяца назад

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVSS3: 7.5
redhat
около 1 месяца назад

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVSS3: 9.6
nvd
около 1 месяца назад

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVSS3: 9.6
github
около 1 месяца назад

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

rocky
16 дней назад

Important: thunderbird security update

EPSS

Процентиль: 25%
0.00319
Низкий