critique
CVE-2026-2782
firefox: thunderbird: Privilege escalation in the Netmonitor component
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon AlmaLinux (élevée), Amazon (élevée), Oracle (élevée), Rocky Linux (élevée), Red Hat (moyenne), Ubuntu (moyenne).
Description
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alma 8 | firefox, thunderbird | 140.8.0-2.el8_10.alma.1 et 1 autres |
| alma 9 | firefox, firefox-x11, thunderbird | 140.8.0-2.el9_7.alma.1 et 1 autres |
| amazon linux 2 | thunderbird | 140.8.0-1.amzn2.0.1 |
| amazon linux 2023 | firefox, firefox-debuginfo, firefox-debugsource | 140.8.0-1.amzn2023.0.1 |
| chainguard | firefox, firefox-esr | 148.0-r0 et 1 autres |
| debian 11 | firefox-esr, thunderbird | 140.8.0esr-1~deb11u1 et 1 autres |
| debian 12 | firefox-esr, thunderbird | 140.8.0esr-1~deb12u1 et 1 autres |
| debian 13 | firefox-esr, thunderbird | 140.8.0esr-1~deb13u1 et 1 autres |
| debian 14 | firefox-esr, thunderbird | 140.8.0esr-1 et 1 autres |
| echo | firefox-esr, thunderbird | 140.8.0esr-1~deb12u1 et 1 autres |
| Oracle Linux 7 | firefox | 140.8.0-2.0.1.el7_9 |
| Oracle Linux 8 | firefox, thunderbird | 140.8.0-2.0.1.el8_10 et 1 autres |
Afficher les 59 entrées de 32 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alma 8 | firefox | 140.8.0-2.el8_10.alma.1 |
| alma 8 | thunderbird | 140.8.0-1.el8_10.alma.1 |
| alma 9 | firefox | 140.8.0-2.el9_7.alma.1 |
| alma 9 | firefox-x11 | 140.8.0-2.el9_7.alma.1 |
| alma 9 | thunderbird | 140.8.0-1.el9_7.alma.1 |
| amazon linux 2 | thunderbird | 140.8.0-1.amzn2.0.1 |
| amazon linux 2023 | firefox | 140.8.0-1.amzn2023.0.1 |
| amazon linux 2023 | firefox-debuginfo | 140.8.0-1.amzn2023.0.1 |
| amazon linux 2023 | firefox-debugsource | 140.8.0-1.amzn2023.0.1 |
| chainguard | firefox | 148.0-r0 |
| chainguard | firefox-esr | 140.8.0-r0 |
| debian 11 | firefox-esr | 140.8.0esr-1~deb11u1 |
| debian 11 | thunderbird | 1:140.8.0esr-1~deb11u1 |
| debian 12 | firefox-esr | 140.8.0esr-1~deb12u1 |
| debian 12 | thunderbird | 1:140.8.0esr-1~deb12u1 |
| debian 13 | firefox-esr | 140.8.0esr-1~deb13u1 |
| debian 13 | thunderbird | 1:140.8.0esr-1~deb13u1 |
| debian 14 | firefox-esr | 140.8.0esr-1 |
| debian 14 | thunderbird | 1:140.8.0esr-1 |
| echo | firefox-esr | 140.8.0esr-1~deb12u1 |
| echo | thunderbird | 1:140.8.0esr-1~deb12u1 |
| Oracle Linux 7 | firefox | 140.8.0-2.0.1.el7_9 |
| Oracle Linux 8 | firefox | 140.8.0-2.0.1.el8_10 |
| Oracle Linux 8 | thunderbird | 140.8.0-1.0.1.el8_10 |
| Oracle Linux 9 | firefox | 140.8.0-2.0.1.el9_7 |
| Oracle Linux 9 | firefox-x11 | 140.8.0-2.0.1.el9_7 |
| Oracle Linux 9 | thunderbird | 140.8.0-1.0.1.el9_7 |
| rapidfort alpine 3.20 | thunderbird | 144.0-r0 |
| rapidfort alpine 3.21 | thunderbird | 144.0-r0 |
| rapidfort alpine 3.22 | thunderbird | 144.0-r0 |
| rapidfort alpine 3.23 | thunderbird | 144.0-r0 |
| rapidfort amazon linux 2023 | firefox | 140.8.0-1.amzn2023.0.1 |
| rapidfort debian 12 | firefox-esr | 0:140.8.0esr-1, 0:140.8.0esr-1~deb11u1, 0:140.8.0esr-1~deb12u1, 0:140.8.0esr-1~deb13u1 |
| rapidfort debian 12 | thunderbird | 0:140.8.0esr-1~deb11u1, 0:140.8.0esr-1~deb12u1, 0:140.8.0esr-1~deb13u1, 1:140.8.0esr-1 |
| rapidfort debian 13 | firefox-esr | 0:140.8.0esr-1, 0:140.8.0esr-1~deb11u1, 0:140.8.0esr-1~deb12u1, 0:140.8.0esr-1~deb13u1 |
| rapidfort debian 13 | thunderbird | 0:140.8.0esr-1~deb11u1, 0:140.8.0esr-1~deb12u1, 0:140.8.0esr-1~deb13u1, 1:140.8.0esr-1 |
| rapidfort fedora 43 | firefox | 148.0.2-1.fc43 |
| rapidfort fedora 43 | firefox-langpacks | 148.0.2-1.fc43 |
| rapidfort fedora 43 | thunderbird | 145.0-1.fc43 |
| rapidfort fedora 43 | thunderbird-librnp-rnp | 145.0-1.fc43 |
| rapidfort Oracle Linux 10 | firefox | 0:140.8.0-2.0.1.el10_1 |
| rapidfort Oracle Linux 10 | thunderbird | 0:140.8.0-2.0.1.el10_1 |
| rapidfort Oracle Linux 9 | firefox | 0:140.8.0-2.0.1.el9_7 |
| rapidfort Oracle Linux 9 | firefox-x11 | 0:140.8.0-2.0.1.el9_7 |
| rapidfort Oracle Linux 9 | thunderbird | 0:140.8.0-1.0.1.el9_7 |
| rapidfort ubuntu 20.04 | thunderbird | pas de correctif indiqué |
| rapidfort ubuntu 22.04 | thunderbird | pas de correctif indiqué |
| rapidfort ubuntu 24.04 | thunderbird | pas de correctif indiqué |
| Red Hat | firefox | pas de correctif indiqué |
| Red Hat | thunderbird | pas de correctif indiqué |
| rocky 10 | firefox | 140.8.0-2.el10_1 |
| rocky 10 | thunderbird | 140.8.0-2.el10_1 |
| rocky 8 | firefox | 140.8.0-2.el8_10 |
| rocky 8 | thunderbird | 140.8.0-1.el8_10 |
| rocky 9 | firefox | 140.8.0-2.el9_7 |
| rocky 9 | firefox-x11 | 140.8.0-2.el9_7 |
| rocky 9 | thunderbird | 140.8.0-1.el9_7 |
| ubuntu 22.04 | thunderbird | pas de correctif indiqué |
| wolfi | firefox | 148.0-r0 |
Références
- https://access.redhat.com/errata/RHSA-2026:3516
- https://access.redhat.com/security/cve/CVE-2026-2782
- https://bugzilla.mozilla.org/show_bug.cgi?id=2010743
- https://bugzilla.redhat.com/2440219
- https://bugzilla.redhat.com/2442284
- https://bugzilla.redhat.com/2442287
- https://bugzilla.redhat.com/2442288
- https://bugzilla.redhat.com/2442290
Les 132 références
- https://bugzilla.redhat.com/2442291
- https://bugzilla.redhat.com/2442292
- https://bugzilla.redhat.com/2442294
- https://bugzilla.redhat.com/2442295
- https://bugzilla.redhat.com/2442297
- https://bugzilla.redhat.com/2442298
- https://bugzilla.redhat.com/2442300
- https://bugzilla.redhat.com/2442302
- https://bugzilla.redhat.com/2442304
- https://bugzilla.redhat.com/2442307
- https://bugzilla.redhat.com/2442308
- https://bugzilla.redhat.com/2442309
- https://bugzilla.redhat.com/2442312
- https://bugzilla.redhat.com/2442313
- https://bugzilla.redhat.com/2442314
- https://bugzilla.redhat.com/2442316
- https://bugzilla.redhat.com/2442318
- https://bugzilla.redhat.com/2442319
- https://bugzilla.redhat.com/2442320
- https://bugzilla.redhat.com/2442322
- https://bugzilla.redhat.com/2442324
- https://bugzilla.redhat.com/2442325
- https://bugzilla.redhat.com/2442326
- https://bugzilla.redhat.com/2442327
- https://bugzilla.redhat.com/2442328
- https://bugzilla.redhat.com/2442329
- https://bugzilla.redhat.com/2442331
- https://bugzilla.redhat.com/2442333
- https://bugzilla.redhat.com/2442334
- https://bugzilla.redhat.com/2442335
- https://bugzilla.redhat.com/2442337
- https://bugzilla.redhat.com/2442342
- https://bugzilla.redhat.com/2442343
- https://bugzilla.redhat.com/show_bug.cgi?id=2440219
- https://bugzilla.redhat.com/show_bug.cgi?id=2442284
- https://bugzilla.redhat.com/show_bug.cgi?id=2442287
- https://bugzilla.redhat.com/show_bug.cgi?id=2442288
- https://bugzilla.redhat.com/show_bug.cgi?id=2442290
- https://bugzilla.redhat.com/show_bug.cgi?id=2442291
- https://bugzilla.redhat.com/show_bug.cgi?id=2442292
- https://bugzilla.redhat.com/show_bug.cgi?id=2442294
- https://bugzilla.redhat.com/show_bug.cgi?id=2442295
- https://bugzilla.redhat.com/show_bug.cgi?id=2442297
- https://bugzilla.redhat.com/show_bug.cgi?id=2442298
- https://bugzilla.redhat.com/show_bug.cgi?id=2442300
- https://bugzilla.redhat.com/show_bug.cgi?id=2442302
- https://bugzilla.redhat.com/show_bug.cgi?id=2442304
- https://bugzilla.redhat.com/show_bug.cgi?id=2442307
- https://bugzilla.redhat.com/show_bug.cgi?id=2442308
- https://bugzilla.redhat.com/show_bug.cgi?id=2442309
- https://bugzilla.redhat.com/show_bug.cgi?id=2442312
- https://bugzilla.redhat.com/show_bug.cgi?id=2442313
- https://bugzilla.redhat.com/show_bug.cgi?id=2442314
- https://bugzilla.redhat.com/show_bug.cgi?id=2442316
- https://bugzilla.redhat.com/show_bug.cgi?id=2442318
- https://bugzilla.redhat.com/show_bug.cgi?id=2442319
- https://bugzilla.redhat.com/show_bug.cgi?id=2442320
- https://bugzilla.redhat.com/show_bug.cgi?id=2442322
- https://bugzilla.redhat.com/show_bug.cgi?id=2442324
- https://bugzilla.redhat.com/show_bug.cgi?id=2442325
- https://bugzilla.redhat.com/show_bug.cgi?id=2442326
- https://bugzilla.redhat.com/show_bug.cgi?id=2442327
- https://bugzilla.redhat.com/show_bug.cgi?id=2442328
- https://bugzilla.redhat.com/show_bug.cgi?id=2442329
- https://bugzilla.redhat.com/show_bug.cgi?id=2442331
- https://bugzilla.redhat.com/show_bug.cgi?id=2442333
- https://bugzilla.redhat.com/show_bug.cgi?id=2442334
- https://bugzilla.redhat.com/show_bug.cgi?id=2442335
- https://bugzilla.redhat.com/show_bug.cgi?id=2442337
- https://bugzilla.redhat.com/show_bug.cgi?id=2442342
- https://bugzilla.redhat.com/show_bug.cgi?id=2442343
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2447
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2757
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2758
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2759
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2760
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2761
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2762
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2763
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2764
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2765
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2766
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2767
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2768
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2769
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2770
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2771
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2772
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2773
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2774
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2775
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2776
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2777
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2778
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2779
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2780
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2781
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2782
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2783
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2784
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2785
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2786
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2787
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2788
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2789
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2790
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2791
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2792
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2793
- https://errata.almalinux.org/9/ALSA-2026-3516.html
- https://errata.rockylinux.org/RLSA-2026:3516
- https://linux.oracle.com/cve/CVE-2026-2782.html
- https://linux.oracle.com/errata/ELSA-2026-3984.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-2782
- https://www.cve.org/CVERecord?id=CVE-2026-2782
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-13/#CVE-2026-2782
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-15/#CVE-2026-2782
- https://www.mozilla.org/security/advisories/mfsa2026-13/
- https://www.mozilla.org/security/advisories/mfsa2026-15/
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2782
- https://www.mozilla.org/security/advisories/mfsa2026-16/
- https://www.mozilla.org/security/advisories/mfsa2026-17/
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2782