Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-109704

Опубликовано: 13 окт. 2026
Источник: debian
EPSS Низкий

Описание

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxnot-affectedpackage
firefox-esrnot-affectedpackage
thunderbirdnot-affectedpackage

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109704

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109704

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109704

EPSS

Процентиль: 35%
0.00409
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
27 дней назад

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVSS3: 7.5
redhat
27 дней назад

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVSS3: 8.8
nvd
27 дней назад

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVSS3: 8.8
github
27 дней назад

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

rocky
9 дней назад

Important: firefox security, bug fix, and enhancement update

EPSS

Процентиль: 35%
0.00409
Низкий