Zafiyetler / CVE-2026-84143

kritik

CVE-2026-84143

firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15

Yayın Değişiklik CWE 119, 200
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (yüksek), AlmaLinux (yüksek), Amazon (yüksek), Oracle (yüksek), Rocky Linux (yüksek), Ubuntu (orta).

Açıklama

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
alma 10firefox, thunderbird140.15.0-1.el10_2 ve 1 tane daha
alma 8firefox, thunderbird140.15.0-1.el8_10.alma.1 ve 1 tane daha
alma 9firefox, firefox-x11, thunderbird140.15.0-1.el9_8.alma.1 ve 1 tane daha
amazon linux 2023firefox, firefox-debuginfo, firefox-debugsource140.16.0-1.amzn2023.0.1
chainguardfirefox155.0.1-r0
debian 11firefox-esr, thunderbirddüzeltme belirtilmemiş
debian 12firefox-esr, thunderbird140.15.0esr-1~deb12u1 ve 1 tane daha
debian 13firefox-esr, thunderbird140.15.0esr-1~deb13u1 ve 1 tane daha
debian 14firefox-esr, thunderbird140.15.0esr-1 ve 1 tane daha
echofirefox-esr, thunderbird140.15.0esr-1~deb12u1 ve 1 tane daha
Oracle Linux 8firefox, thunderbird140.15.0-1.0.1.el8_10 ve 1 tane daha
Oracle Linux 9firefox, firefox-x11, thunderbird140.15.0-1.0.1.el9_8 ve 1 tane daha
35 kaynaktaki 70 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
alma 10firefox140.15.0-1.el10_2
alma 10thunderbird140.16.0-1.el10_2.alma.1
alma 8firefox140.15.0-1.el8_10.alma.1
alma 8thunderbird140.16.0-1.el8_10.alma.1
alma 9firefox140.15.0-1.el9_8.alma.1
alma 9firefox-x11140.15.0-1.el9_8.alma.1
alma 9thunderbird140.16.0-1.el9_8.alma.1
amazon linux 2023firefox140.16.0-1.amzn2023.0.1
amazon linux 2023firefox-debuginfo140.16.0-1.amzn2023.0.1
amazon linux 2023firefox-debugsource140.16.0-1.amzn2023.0.1
chainguardfirefox155.0.1-r0
debian 11firefox-esrdüzeltme belirtilmemiş
debian 11thunderbirddüzeltme belirtilmemiş
debian 12firefox-esr140.15.0esr-1~deb12u1
debian 12thunderbird1:140.15.0esr-1~deb12u1
debian 13firefox-esr140.15.0esr-1~deb13u1
debian 13thunderbird1:140.15.0esr-1~deb13u1
debian 14firefox-esr140.15.0esr-1
debian 14thunderbird1:153.2.0esr-1
echofirefox-esr140.15.0esr-1~deb12u1
echothunderbird1:140.15.0esr-1~deb12u1
Oracle Linux 8firefox140.15.0-1.0.1.el8_10
Oracle Linux 8thunderbird140.16.0-1.0.1.el8_10
Oracle Linux 9firefox140.15.0-1.0.1.el9_8
Oracle Linux 9firefox-x11140.15.0-1.0.1.el9_8
Oracle Linux 9thunderbird140.16.0-1.0.1.el9_8
rapidfort alma 10firefox0:140.15.0-1.el10_0, 140.15.0-1.el10_2
rapidfort alma 10thunderbird0:140.15.0-1.el10_0, 140.16.0-1.el10_2.alma.1
rapidfort alma 9firefox0:140.15.0-1.el9_2, 140.15.0-1.el9_8.alma.1
rapidfort alma 9firefox-x110:140.15.0-1.el9_2, 140.15.0-1.el9_8.alma.1
rapidfort alma 9thunderbird0:140.15.0-1.el9_2, 140.16.0-1.el9_8.alma.1
rapidfort alpine 3.20firefoxdüzeltme belirtilmemiş
rapidfort alpine 3.20thunderbird144.0-r0, 145.0-r1, 151.0.1-r1
rapidfort alpine 3.21firefoxdüzeltme belirtilmemiş
rapidfort alpine 3.21thunderbird144.0-r0, 145.0-r1, 151.0.1-r1
rapidfort alpine 3.22firefoxdüzeltme belirtilmemiş
rapidfort alpine 3.22thunderbird144.0-r0, 145.0-r1, 151.0.1-r1
rapidfort alpine 3.23firefoxdüzeltme belirtilmemiş
rapidfort alpine 3.23thunderbird145.0-r1, 151.0.1-r1
rapidfort alpine 3.24firefoxdüzeltme belirtilmemiş
rapidfort alpine 3.24thunderbird151.0.1-r1
rapidfort amazon linux 2023firefox140.16.0-1.amzn2023.0.1
rapidfort debian 12firefox-esr0:140.15.0esr-1, 0:140.15.0esr-1~deb12u1, 0:140.15.0esr-1~deb13u1
rapidfort debian 12thunderbird0:140.15.0esr-1~deb12u1, 0:140.15.0esr-1~deb13u1, 1:153.2.0esr-1
rapidfort debian 13firefox-esr0:140.15.0esr-1, 0:140.15.0esr-1~deb12u1, 0:140.15.0esr-1~deb13u1
rapidfort debian 13thunderbird0:140.15.0esr-1~deb12u1, 0:140.15.0esr-1~deb13u1, 1:153.2.0esr-1
rapidfort fedora 43thunderbird145.0-1.fc43
rapidfort fedora 43thunderbird-librnp-rnp145.0-1.fc43
rapidfort Oracle Linux 10firefox0:140.15.0-1.0.1.el10_2
rapidfort Oracle Linux 10thunderbird0:140.16.0-1.0.1.el10_2
rapidfort Oracle Linux 9firefox0:140.15.0-1.0.1.el9_8
rapidfort Oracle Linux 9firefox-x110:140.15.0-1.0.1.el9_8
rapidfort Oracle Linux 9thunderbird0:140.16.0-1.0.1.el9_8
rapidfort rocky 9firefox0:140.15.0-1.el9_8
rapidfort rocky 9firefox-x110:140.15.0-1.el9_8
rapidfort rocky 9thunderbird0:140.16.0-1.el9_8
rapidfort ubuntu 20.04thunderbirddüzeltme belirtilmemiş
rapidfort ubuntu 22.04thunderbirddüzeltme belirtilmemiş
rapidfort ubuntu 24.04thunderbirddüzeltme belirtilmemiş
Red Hatfirefoxdüzeltme belirtilmemiş
Red Hatthunderbirddüzeltme belirtilmemiş
rocky 10firefox140.15.0-1.el10_2
rocky 10thunderbird140.16.0-1.el10_2
rocky 8firefox140.15.0-1.el8_10
rocky 8thunderbird140.16.0-1.el8_10
rocky 9firefox140.15.0-1.el9_8
rocky 9firefox-x11140.15.0-1.el9_8
rocky 9thunderbird140.16.0-1.el9_8
ubuntu 22.04thunderbirddüzeltme belirtilmemiş
wolfifirefox155.0.1-r0

Referanslar

152 referansın hepsi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.