CVE-2026-2761

Опубликовано: 24 фев. 2026

Источник: redhat

CVSS3: 7.5

EPSS Низкий

Описание

Sandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Graphics: WebRender component

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 10	rhel10/firefox-flatpak	Affected
Red Hat Enterprise Linux 10	rhel10/thunderbird-flatpak	Affected
Red Hat Enterprise Linux 6	firefox	Out of support scope
Red Hat Enterprise Linux 6	thunderbird	Out of support scope
Red Hat Enterprise Linux 7	thunderbird	Out of support scope
Red Hat Enterprise Linux 10	firefox	Fixed	RHSA-2026:3361	25.02.2026
Red Hat Enterprise Linux 10	thunderbird	Fixed	RHSA-2026:3517	02.03.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	firefox	Fixed	RHSA-2026:3976	09.03.2026
Red Hat Enterprise Linux 10.0 Extended Update Support	thunderbird	Fixed	RHSA-2026:4260	11.03.2026
Red Hat Enterprise Linux 7 Extended Lifecycle Support	firefox	Fixed	RHSA-2026:3984	09.03.2026

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Important

https://bugzilla.redhat.com/show_bug.cgi?id=2442309firefox: thunderbird: Sandbox escape in the Graphics: WebRender component

EPSS

Процентиль: 32%

0.00127

Низкий

7.5 High

CVSS3

Связанные уязвимости

CVE-2026-2761

CVSS3: 10

ubuntu

30 дней назад

Sandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.

CVE-2026-2761

CVSS3: 10

nvd

30 дней назад

Sandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.

CVE-2026-2761

CVSS3: 10

debian

30 дней назад

Sandbox escape in the Graphics: WebRender component. This vulnerabilit ...

GHSA-g5w7-69g8-vcwp

CVSS3: 10

github

30 дней назад

Sandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.

openSUSE-SU-2026:20365-1

suse-cvrf

10 дней назад

Security update for MozillaFirefox

EPSS

Процентиль: 32%

0.00127

Низкий

7.5 High

CVSS3