Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-2787

Опубликовано: 24 фев. 2026
Источник: debian

Описание

Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed148.0-1package
firefox-esrfixed140.8.0esr-1package
thunderbirdfixed1:140.8.0esr-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-13/#CVE-2026-2787

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-15/#CVE-2026-2787

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-17/#CVE-2026-2787

Связанные уязвимости

CVSS3: 9.8
ubuntu
4 месяца назад

Use-after-free in the DOM: Window and Location component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.

CVSS3: 6.1
redhat
4 месяца назад

Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

CVSS3: 9.8
nvd
4 месяца назад

Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

CVSS3: 9.8
github
4 месяца назад

Use-after-free in the DOM: Window and Location component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

suse-cvrf
3 месяца назад

Security update for MozillaFirefox