CVE-2026-109704

Опубликовано: 13 окт. 2026

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Ссылки

EPSS

Процентиль: 35%

0.00409

Низкий

8.8 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVE-2026-109704

CVSS3: 8.8

ubuntu

26 дней назад

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109704

CVSS3: 7.5

redhat

26 дней назад

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109704

CVSS3: 8.8

debian

26 дней назад

Privilege escalation in the Application Update component. This vulnera ...

GHSA-2rfh-6j5m-8mfw

CVSS3: 8.8

github

26 дней назад

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

RLSA-2026:89758

rocky

8 дней назад

Important: firefox security, bug fix, and enhancement update

EPSS

Процентиль: 35%

0.00409

Низкий

8.8 High

CVSS3

Дефекты

CWE-269