Attestkeep
Langue : Français
S'inscrire

Vulnérabilités / CVE-2026-2793

critique

CVE-2026-2793

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148

Publiée Modifiée CWE 787
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.

Sévérité par source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Red Hat (élevée), AlmaLinux (élevée), Amazon (élevée), Oracle (élevée), Rocky Linux (élevée), Ubuntu (moyenne).

Description

Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

Paquets affectés et versions corrigées

SourcePaquetCorrigé en
alma 8firefox, thunderbird140.8.0-2.el8_10.alma.1 et 1 autres
alma 9firefox, firefox-x11, thunderbird140.8.0-2.el9_7.alma.1 et 1 autres
amazon linux 2thunderbird140.8.0-1.amzn2.0.1
amazon linux 2023firefox, firefox-debuginfo, firefox-debugsource140.8.0-1.amzn2023.0.1
chainguardfirefox, firefox-esr140.8.0-r0
debian 11firefox-esr, thunderbird140.8.0esr-1~deb11u1 et 1 autres
debian 12firefox-esr, thunderbird140.8.0esr-1~deb12u1 et 1 autres
debian 13firefox-esr, thunderbird140.8.0esr-1~deb13u1 et 1 autres
debian 14firefox-esr, thunderbird140.8.0esr-1 et 1 autres
echofirefox-esr, thunderbird140.8.0esr-1~deb12u1 et 1 autres
Oracle Linux 7firefox140.8.0-2.0.1.el7_9
Oracle Linux 8firefox, thunderbird140.8.0-2.0.1.el8_10 et 1 autres
Afficher les 63 entrées de 33 sources
SourcePaquetCorrigé en
alma 8firefox140.8.0-2.el8_10.alma.1
alma 8thunderbird140.8.0-1.el8_10.alma.1
alma 9firefox140.8.0-2.el9_7.alma.1
alma 9firefox-x11140.8.0-2.el9_7.alma.1
alma 9thunderbird140.8.0-1.el9_7.alma.1
amazon linux 2thunderbird140.8.0-1.amzn2.0.1
amazon linux 2023firefox140.8.0-1.amzn2023.0.1
amazon linux 2023firefox-debuginfo140.8.0-1.amzn2023.0.1
amazon linux 2023firefox-debugsource140.8.0-1.amzn2023.0.1
chainguardfirefox140.8.0-r0
chainguardfirefox-esr140.8.0-r0
debian 11firefox-esr140.8.0esr-1~deb11u1
debian 11thunderbird1:140.8.0esr-1~deb11u1
debian 12firefox-esr140.8.0esr-1~deb12u1
debian 12thunderbird1:140.8.0esr-1~deb12u1
debian 13firefox-esr140.8.0esr-1~deb13u1
debian 13thunderbird1:140.8.0esr-1~deb13u1
debian 14firefox-esr140.8.0esr-1
debian 14thunderbird1:140.8.0esr-1
echofirefox-esr140.8.0esr-1~deb12u1
echothunderbird1:140.8.0esr-1~deb12u1
Oracle Linux 7firefox140.8.0-2.0.1.el7_9
Oracle Linux 8firefox140.8.0-2.0.1.el8_10
Oracle Linux 8thunderbird140.8.0-1.0.1.el8_10
Oracle Linux 9firefox140.8.0-2.0.1.el9_7
Oracle Linux 9firefox-x11140.8.0-2.0.1.el9_7
Oracle Linux 9thunderbird140.8.0-1.0.1.el9_7
rapidfort alpine 3.20firefox142.0-r0
rapidfort alpine 3.20thunderbird144.0-r0
rapidfort alpine 3.21firefox142.0-r0
rapidfort alpine 3.21thunderbird144.0-r0
rapidfort alpine 3.22firefox142.0-r0
rapidfort alpine 3.22thunderbird144.0-r0
rapidfort alpine 3.23thunderbird144.0-r0
rapidfort alpine 3.24firefox142.0-r0
rapidfort amazon linux 2023firefox140.8.0-1.amzn2023.0.1
rapidfort debian 12firefox-esr0:140.8.0esr-1, 0:140.8.0esr-1~deb11u1, 0:140.8.0esr-1~deb12u1, 0:140.8.0esr-1~deb13u1
rapidfort debian 12thunderbird0:140.8.0esr-1~deb11u1, 0:140.8.0esr-1~deb12u1, 0:140.8.0esr-1~deb13u1, 1:140.8.0esr-1
rapidfort debian 13firefox-esr0:140.8.0esr-1, 0:140.8.0esr-1~deb11u1, 0:140.8.0esr-1~deb12u1, 0:140.8.0esr-1~deb13u1
rapidfort debian 13thunderbird0:140.8.0esr-1~deb11u1, 0:140.8.0esr-1~deb12u1, 0:140.8.0esr-1~deb13u1, 1:140.8.0esr-1
rapidfort fedora 43firefox148.0.2-1.fc43
rapidfort fedora 43firefox-langpacks148.0.2-1.fc43
rapidfort fedora 43thunderbird145.0-1.fc43
rapidfort fedora 43thunderbird-librnp-rnp145.0-1.fc43
rapidfort Oracle Linux 10firefox0:140.8.0-2.0.1.el10_1
rapidfort Oracle Linux 10thunderbird0:140.8.0-2.0.1.el10_1
rapidfort Oracle Linux 9firefox0:140.8.0-2.0.1.el9_7
rapidfort Oracle Linux 9firefox-x110:140.8.0-2.0.1.el9_7
rapidfort Oracle Linux 9thunderbird0:140.8.0-1.0.1.el9_7
rapidfort ubuntu 20.04thunderbirdpas de correctif indiqué
rapidfort ubuntu 22.04thunderbirdpas de correctif indiqué
rapidfort ubuntu 24.04thunderbirdpas de correctif indiqué
Red Hatfirefoxpas de correctif indiqué
Red Hatthunderbirdpas de correctif indiqué
rocky 10firefox140.8.0-2.el10_1
rocky 10thunderbird140.8.0-2.el10_1
rocky 8firefox140.8.0-2.el8_10
rocky 8thunderbird140.8.0-1.el8_10
rocky 9firefox140.8.0-2.el9_7
rocky 9firefox-x11140.8.0-2.el9_7
rocky 9thunderbird140.8.0-1.el9_7
ubuntu 22.04thunderbirdpas de correctif indiqué
wolfifirefox140.8.0-r0

Références

Les 158 références

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.