CVE-2026-16391

Опубликовано: 21 июл. 2026

Источник: redhat

CVSS3: 6.1

EPSS Низкий

Описание

Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Storage: IndexedDB component

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 10	rhel10/firefox-flatpak	Affected
Red Hat Enterprise Linux 10	rhel10/thunderbird-flatpak	Affected
Red Hat Enterprise Linux 6	firefox	Out of support scope
Red Hat Enterprise Linux 6	thunderbird	Out of support scope
Red Hat Enterprise Linux 7	thunderbird	Out of support scope
Red Hat Enterprise Linux 10	firefox	Fixed	RHSA-2026:47101	28.07.2026
Red Hat Enterprise Linux 10	thunderbird	Fixed	RHSA-2026:49621	03.08.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	thunderbird	Fixed	RHSA-2026:53445	11.08.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	firefox	Fixed	RHSA-2026:54181	12.08.2026
Red Hat Enterprise Linux 7 Extended Lifecycle Support	firefox	Fixed	RHSA-2026:54248	12.08.2026

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-312

https://bugzilla.redhat.com/show_bug.cgi?id=2503420firefox: thunderbird: Information disclosure in the Storage: IndexedDB component

EPSS

Процентиль: 25%

0.00322

Низкий

6.1 Medium

CVSS3

Связанные уязвимости

CVE-2026-16391

CVSS3: 7.5

ubuntu

около 2 месяцев назад

Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVE-2026-16391

CVSS3: 7.5

nvd

около 2 месяцев назад

Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVE-2026-16391

CVSS3: 7.5

debian

около 2 месяцев назад

Information disclosure in the Storage: IndexedDB component. This vulne ...

GHSA-jvcf-79h8-93pm

CVSS3: 7.5

github

около 2 месяцев назад

Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13.

SUSE-SU-2026:3221-1

suse-cvrf

около 2 месяцев назад

Security update for MozillaFirefox

EPSS

Процентиль: 25%

0.00322

Низкий

6.1 Medium

CVSS3