CVE-2026-8401

Опубликовано: 12 мая 2026

Источник: debian

EPSS Низкий

Описание

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

Пакеты

Пакет	Статус	Версия исправления	Тип
firefox	fixed	150.0.3-1	package
firefox-esr	fixed	140.11.0esr-1	package
thunderbird	fixed	1:140.11.0esr-1	package

Примечания

https://www.mozilla.org/en-US/security/advisories/mfsa2026-45/#CVE-2026-8401
https://www.mozilla.org/en-US/security/advisories/mfsa2026-48/#CVE-2026-8401
https://www.mozilla.org/en-US/security/advisories/mfsa2026-51/#CVE-2026-8401

EPSS

Процентиль: 24%

0.00313

Низкий

Связанные уязвимости

CVE-2026-8401

CVSS3: 9.8

ubuntu

3 месяца назад

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

CVE-2026-8401

CVSS3: 7.5

redhat

3 месяца назад

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

CVE-2026-8401

CVSS3: 9.8

nvd

3 месяца назад

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

GHSA-rr5w-74h2-xqhc

CVSS3: 9.8

github

3 месяца назад

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3.

RLSA-2026:21382

rocky

2 месяца назад

Important: firefox security update

EPSS

Процентиль: 24%

0.00313

Низкий