CVE-2026-100820

Опубликовано: 29 сент. 2026

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Ссылки

https://bugzilla.mozilla.org/show_bug.cgi?id=2071645
Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026-100/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-101/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-102/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-103/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-97/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-99/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия до 140.17.0 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 141.0 (включая) до 153.4.0 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 154.0.0 (включая) до 157.0.0 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия до 140.17.0 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 141.0 (включая) до 153.4.0 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 154.0 (включая) до 157.0 (исключая)

EPSS

Процентиль: 15%

0.00238

Низкий

8.8 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVE-2026-100820

CVSS3: 8.8

ubuntu

около 1 месяца назад

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

CVE-2026-100820

CVSS3: 6.1

redhat

около 1 месяца назад

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

CVE-2026-100820

CVSS3: 8.8

debian

около 1 месяца назад

Privilege escalation in the Address Bar component. This vulnerability ...

GHSA-257v-qj3f-78fw

CVSS3: 8.8

github

около 1 месяца назад

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

RLSA-2026:80694

rocky

16 дней назад

Important: thunderbird security update

EPSS

Процентиль: 15%

0.00238

Низкий

8.8 High

CVSS3

Дефекты

CWE-269