CVE-2026-117956

Опубликовано: 27 окт. 2026

Источник: debian

EPSS Низкий

Описание

Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Пакеты

Пакет	Статус	Версия исправления	Тип
firefox	fixed	159.0-1	package
firefox-esr	fixed	153.6.0esr-1	package
thunderbird	fixed	1:153.6.0esr-1	package

Примечания

https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117956
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117956
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117956

EPSS

Процентиль: 33%

0.00391

Низкий

Связанные уязвимости

CVE-2026-117956

CVSS3: 8.8

ubuntu

12 дней назад

Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

CVE-2026-117956

CVSS3: 8.8

nvd

12 дней назад

Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

GHSA-78p3-4vf3-pv2m

CVSS3: 8.8

github

12 дней назад

Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

ELSA-2026-94405

oracle-oval

6 дней назад

ELSA-2026-94405: firefox security update (IMPORTANT)

ELSA-2026-93957

oracle-oval

6 дней назад

ELSA-2026-93957: firefox security update (IMPORTANT)

EPSS

Процентиль: 33%

0.00391

Низкий