CVE-2026-100801

Опубликовано: 29 сент. 2026

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 159, Firefox ESR 153.6, Thunderbird 159, Thunderbird 153.6, Firefox 157, and Firefox ESR 140.17.

Ссылки

https://bugzilla.mozilla.org/show_bug.cgi?id=2057112
Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026-100/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-101/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-102/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-103/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-118/
https://www.mozilla.org/security/advisories/mfsa2026-120/
https://www.mozilla.org/security/advisories/mfsa2026-121/
https://www.mozilla.org/security/advisories/mfsa2026-122/
https://www.mozilla.org/security/advisories/mfsa2026-97/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-99/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия до 140.17.0 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 141.0 (включая) до 153.4.0 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 154.0.0 (включая) до 157.0.0 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия до 140.17.0 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 141.0 (включая) до 153.4.0 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 154.0 (включая) до 157.0 (исключая)

EPSS

Процентиль: 21%

0.00282

Низкий

8.8 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVE-2026-100801

CVSS3: 8.8

ubuntu

около 1 месяца назад

CVE-2026-100801

CVSS3: 6.1

redhat

около 1 месяца назад

Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

CVE-2026-100801

CVSS3: 8.8

debian

около 1 месяца назад

Privilege escalation in the DLL Services component. This vulnerability ...

GHSA-7f52-cp5w-7wmh

CVSS3: 8.8

github

около 1 месяца назад

Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

RLSA-2026:80694

rocky

16 дней назад

Important: thunderbird security update

EPSS

Процентиль: 21%

0.00282

Низкий

8.8 High

CVSS3

Дефекты

CWE-269