Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-2776

Опубликовано: 24 фев. 2026
Источник: debian

Описание

Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed148.0-1package
firefox-esrfixed140.8.0esr-1package
thunderbirdfixed1:140.8.0esr-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-13/#CVE-2026-2776

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-15/#CVE-2026-2776

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-17/#CVE-2026-2776

Связанные уязвимости

CVSS3: 10
ubuntu
30 дней назад

Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.

CVSS3: 7.5
redhat
30 дней назад

Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.

CVSS3: 10
nvd
30 дней назад

Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.

CVSS3: 10
github
30 дней назад

Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

suse-cvrf
10 дней назад

Security update for MozillaFirefox