Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-109712

Опубликовано: 13 окт. 2026
Источник: debian
EPSS Низкий

Описание

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed158.0-1package
firefox-esrfixed153.5.0esr-1package
thunderbirdfixed1:153.5.0esr-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109712

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109712

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109712

EPSS

Процентиль: 13%
0.00224
Низкий

Связанные уязвимости

CVSS3: 7.1
ubuntu
27 дней назад

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVSS3: 7.5
redhat
27 дней назад

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVSS3: 7.1
nvd
27 дней назад

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVSS3: 7.1
github
27 дней назад

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, and Firefox ESR 153.5.

rocky
9 дней назад

Important: firefox security, bug fix, and enhancement update

EPSS

Процентиль: 13%
0.00224
Низкий