CVE-2026-117860

Опубликовано: 27 окт. 2026

Источник: debian

EPSS Низкий

Описание

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Пакеты

Пакет	Статус	Версия исправления	Тип
firefox	fixed	159.0-1	package
firefox-esr	fixed	153.6.0esr-1	package
thunderbird	fixed	1:153.6.0esr-1	package

Примечания

https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117860
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117860
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117860

EPSS

Процентиль: 10%

0.00204

Низкий

Связанные уязвимости

CVE-2026-117860

CVSS3: 8.1

ubuntu

12 дней назад

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

CVE-2026-117860

CVSS3: 7.5

redhat

12 дней назад

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

CVE-2026-117860

CVSS3: 8.1

nvd

12 дней назад

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

GHSA-wmwc-8q25-g888

CVSS3: 8.1

github

12 дней назад

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

ELSA-2026-94405

oracle-oval

6 дней назад

ELSA-2026-94405: firefox security update (IMPORTANT)

EPSS

Процентиль: 10%

0.00204

Низкий