Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-100787

Опубликовано: 29 сент. 2026
Источник: debian

Описание

Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed157.0-1package
firefox-esrfixed153.4.0esr-1package
thunderbirdfixed1:153.4.0esr-1package
thunderbirdnot-affectedtrixiepackage
thunderbirdnot-affectedbookwormpackage

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100787

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100787

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100787

Связанные уязвимости

CVSS3: 9.6
ubuntu
около 1 месяца назад

Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

CVSS3: 7.5
redhat
около 1 месяца назад

Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

CVSS3: 9.6
nvd
около 1 месяца назад

Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

CVSS3: 9.6
github
около 1 месяца назад

Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

suse-cvrf
около 1 месяца назад

Security update for MozillaFirefox