CVE-2026-100820

Опубликовано: 29 сент. 2026

Источник: debian

EPSS Низкий

Описание

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Пакеты

Пакет	Статус	Версия исправления	Тип
firefox	fixed	157.0-1	package
firefox-esr	fixed	153.4.0esr-1	package
thunderbird	fixed	1:153.4.0esr-1	package

Примечания

https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100820
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100820
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100820

EPSS

Процентиль: 15%

0.00238

Низкий

Связанные уязвимости

CVE-2026-100820

CVSS3: 8.8

ubuntu

около 1 месяца назад

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

CVE-2026-100820

CVSS3: 6.1

redhat

около 1 месяца назад

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

CVE-2026-100820

CVSS3: 8.8

nvd

около 1 месяца назад

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

GHSA-257v-qj3f-78fw

CVSS3: 8.8

github

около 1 месяца назад

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

RLSA-2026:80694

rocky

16 дней назад

Important: thunderbird security update

EPSS

Процентиль: 15%

0.00238

Низкий