Описание
If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
Релиз | Статус | Примечание |
---|---|---|
bionic | released | 88.0+build2-0ubuntu0.18.04.2 |
devel | released | 88.0.1+build1-0ubuntu2 |
esm-infra-legacy/trusty | DNE | |
esm-infra/focal | DNE | |
focal | released | 88.0+build2-0ubuntu0.20.04.1 |
groovy | released | 88.0+build2-0ubuntu0.20.10.1 |
hirsute | released | 88.0+build2-0ubuntu0.21.04.1 |
impish | released | 88.0.1+build1-0ubuntu2 |
jammy | released | 88.0.1+build1-0ubuntu2 |
kinetic | released | 88.0.1+build1-0ubuntu2 |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
bionic | DNE | |
devel | DNE | |
esm-infra-legacy/trusty | DNE | |
esm-infra/focal | DNE | |
focal | DNE | |
groovy | DNE | |
hirsute | DNE | |
impish | DNE | |
jammy | DNE | |
kinetic | DNE |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
bionic | ignored | end of standard support, was needs-triage |
devel | DNE | |
esm-apps/bionic | ignored | |
esm-infra-legacy/trusty | DNE | |
esm-infra/focal | DNE | |
focal | DNE | |
groovy | DNE | |
hirsute | DNE | |
impish | DNE | |
jammy | DNE |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
bionic | ignored | end of standard support, was needs-triage |
devel | DNE | |
esm-apps/focal | ignored | |
esm-infra-legacy/trusty | DNE | |
esm-infra/bionic | ignored | |
focal | ignored | |
groovy | ignored | end of life |
hirsute | DNE | |
impish | DNE | |
jammy | DNE |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
bionic | DNE | |
devel | DNE | |
esm-infra-legacy/trusty | DNE | |
esm-infra/focal | ignored | |
focal | ignored | |
groovy | ignored | end of life |
hirsute | DNE | |
impish | DNE | |
jammy | DNE | |
kinetic | DNE |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
bionic | DNE | |
devel | DNE | |
esm-apps/jammy | ignored | |
esm-infra-legacy/trusty | DNE | |
esm-infra/focal | DNE | |
focal | DNE | |
groovy | ignored | end of life |
hirsute | ignored | end of life |
impish | ignored | end of life |
jammy | ignored |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
bionic | released | 1:78.11.0+build1-0ubuntu0.18.04.2 |
devel | released | 1:78.11.0+build1-0ubuntu2 |
esm-infra-legacy/trusty | DNE | |
esm-infra/focal | DNE | |
focal | released | 1:78.11.0+build1-0ubuntu0.20.04.2 |
groovy | released | 1:78.11.0+build1-0ubuntu0.20.10.2 |
hirsute | released | 1:78.11.0+build1-0ubuntu0.21.04.2 |
impish | released | 1:78.11.0+build1-0ubuntu2 |
jammy | released | 1:78.11.0+build1-0ubuntu2 |
kinetic | released | 1:78.11.0+build1-0ubuntu2 |
Показывать по
Ссылки на источники
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
If a Blob URL was loaded through some unusual user interaction, it cou ...
If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
Уязвимость почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, связанная с ошибками наследуемых разрешений, позволяющая нарушителю повысить свои привилегии
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3