CVE-2026-100832

Опубликовано: 29 сент. 2026

Источник: debian

EPSS Низкий

Описание

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
firefox-esr	fixed	153.4.0esr-1		package
thunderbird	fixed	1:153.4.0esr-1		package

Примечания

https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100832
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100832

EPSS

Процентиль: 16%

0.00245

Низкий

Связанные уязвимости

CVE-2026-100832

CVSS3: 8.8

ubuntu

около 1 месяца назад

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

CVE-2026-100832

CVSS3: 7.5

redhat

около 1 месяца назад

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

CVE-2026-100832

CVSS3: 8.8

nvd

около 1 месяца назад

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

GHSA-8ffm-wqc4-j2qw

CVSS3: 8.8

github

около 1 месяца назад

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

RLSA-2026:80694

rocky

16 дней назад

Important: thunderbird security update

EPSS

Процентиль: 16%

0.00245

Низкий