CVE-2026-0877

Опубликовано: 13 янв. 2026

Источник: redhat

CVSS3: 7.5

EPSS Низкий

Описание

Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 147, Firefox ESR < 115.32, Firefox ESR < 140.7, Thunderbird < 147, and Thunderbird < 140.7.

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 10	rhel10/firefox-flatpak	Affected
Red Hat Enterprise Linux 10	rhel10/thunderbird-flatpak	Affected
Red Hat Enterprise Linux 6	firefox	Out of support scope
Red Hat Enterprise Linux 6	thunderbird	Out of support scope
Red Hat Enterprise Linux 7	thunderbird	Out of support scope
Red Hat Enterprise Linux 10	firefox	Fixed	RHSA-2026:2271	09.02.2026
Red Hat Enterprise Linux 10	thunderbird	Fixed	RHSA-2026:2286	09.02.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	firefox	Fixed	RHSA-2026:2271	09.02.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	thunderbird	Fixed	RHSA-2026:2286	09.02.2026
Red Hat Enterprise Linux 7 Extended Lifecycle Support	firefox	Fixed	RHSA-2026:2231	09.02.2026

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Important

https://bugzilla.redhat.com/show_bug.cgi?id=2428969firefox: thunderbird: Mitigation bypass in the DOM: Security component

EPSS

Процентиль: 6%

0.00024

Низкий

7.5 High

CVSS3

Связанные уязвимости

CVE-2026-0877

CVSS3: 8.1

ubuntu

3 месяца назад

Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 147, Firefox ESR < 115.32, Firefox ESR < 140.7, Thunderbird < 147, and Thunderbird < 140.7.

CVE-2026-0877

CVSS3: 8.1

nvd

3 месяца назад

Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 147, Firefox ESR < 115.32, Firefox ESR < 140.7, Thunderbird < 147, and Thunderbird < 140.7.

CVE-2026-0877

CVSS3: 8.1

debian

3 месяца назад

Mitigation bypass in the DOM: Security component. This vulnerability a ...

ROS-20260129-73-0068

CVSS3: 8.1

redos

2 месяца назад

Уязвимость firefox

GHSA-rfgw-g9g4-685p

CVSS3: 8.1

github

3 месяца назад

Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 147, Firefox ESR < 115.32, and Firefox ESR < 140.7.

EPSS

Процентиль: 6%

0.00024

Низкий

7.5 High

CVSS3