Popis
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.
Below is a complete list of vulnerabilities:
- Security vulnerability in the Application Update component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the Networking component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Storage: IndexedDB component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Networking component can be exploited remotely to cause denial of service.
- Security vulnerability in the Security: Process Sandboxing component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the Graphics: Text component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Graphics: Canvas2D component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Graphics component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Crash Reporting component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Layout component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the JavaScript Engine component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the DOM: Bindings (WebIDL) component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the XML component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Graphics: CanvasWebGL component can be exploited remotely to execute arbitrary code.
- Security vulnerability can be exploited to bypass security restrictions.
- Denial of service vulnerability in the JavaScript Engine: JIT component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Layout: Text and Fonts component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the DOM: Core & HTML component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the SVG component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Audio/Video component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the DOM: Animation component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the JavaScript Engine: JIT component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Graphics component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Graphics: Canvas2D component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the DOM: Streams component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the DOM: Security component can be exploited to bypass security restrictions.
- Security vulnerability in the Enterprise Policies component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the Audio/Video: Playback component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the WebExtensions component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Widget: Win32 component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Storage: Bucket File System component can be exploited remotely to execute arbitrary code.
- Information disclosure vulnerability in the PDF Viewer component can be exploited to obtain sensitive information.
- Security vulnerability in the Panning and Zooming component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the DOM: File component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the DOM: Web Serial component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the Address Bar component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the JavaScript: WebAssembly component can be exploited remotely to execute arbitrary code.
- Information disclosure vulnerability in the Networking component can be exploited to obtain sensitive information.
- A remote code execution vulnerability in the DOM: Workers component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the DOM: Editor component can be exploited remotely to cause denial of service.
- Security vulnerability in the DOM: Content Processes component can be exploited to bypass security restrictions.
- Security vulnerability in the DOM: Navigation component can be exploited to bypass security restrictions.
- Security vulnerability in the Networking: HTTP component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the SVG component can be exploited remotely to cause denial of service.
- Security vulnerability in the File Handling component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Site Reports component can be exploited remotely to cause denial of service.
- Information disclosure vulnerability in the Networking: Cache component can be exploited to obtain sensitive information.
- Security UI vulnerability in the DOM: Web Serial component can be exploited to spoof user interface.
- Information disclosure vulnerability in the WebRTC: Networking component can be exploited to obtain sensitive information.
- Security vulnerability in the DevTools component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Sync component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the DOM: Notifications component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the WebRTC component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the XPCOM component can be exploited remotely to execute arbitrary code.
- Information disclosure vulnerability in the Storage: IndexedDB component can be exploited to obtain sensitive information.
- A remote code execution vulnerability in the Networking: DNS component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the DOM: Core & HTML component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Printing: Output component can be exploited remotely to cause denial of service.
Oficiální doporučení
Související produkty
seznam CVE
- CVE-2026-109704 unknown
- CVE-2026-109705 critical
- CVE-2026-109706 high
- CVE-2026-109707 critical
- CVE-2026-109708 unknown
- CVE-2026-109709 critical
- CVE-2026-109710 high
- CVE-2026-109711 high
- CVE-2026-109712 unknown
- CVE-2026-109713 high
- CVE-2026-109714 unknown
- CVE-2026-109715 unknown
- CVE-2026-109716 unknown
- CVE-2026-109717 high
- CVE-2026-109718 high
- CVE-2026-109719 warning
- CVE-2026-109720 unknown
- CVE-2026-109721 unknown
- CVE-2026-109722 unknown
- CVE-2026-109723 unknown
- CVE-2026-109724 high
- CVE-2026-109725 high
- CVE-2026-109726 high
- CVE-2026-109727 high
- CVE-2026-109728 high
- CVE-2026-109729 high
- CVE-2026-109730 unknown
- CVE-2026-109731 unknown
- CVE-2026-109732 high
- CVE-2026-109733 unknown
- CVE-2026-109734 unknown
- CVE-2026-109735 high
- CVE-2026-109736 unknown
- CVE-2026-109737 unknown
- CVE-2026-109738 high
- CVE-2026-109739 unknown
- CVE-2026-109740 unknown
- CVE-2026-109741 high
- CVE-2026-109742 warning
- CVE-2026-109743 unknown
- CVE-2026-109744 unknown
- CVE-2026-109745 unknown
- CVE-2026-109746 unknown
- CVE-2026-109747 unknown
- CVE-2026-109748 high
- CVE-2026-109749 high
- CVE-2026-109750 unknown
- CVE-2026-109751 warning
- CVE-2026-109752 high
- CVE-2026-109753 unknown
- CVE-2026-109754 unknown
- CVE-2026-109755 unknown
- CVE-2026-109756 critical
- CVE-2026-109757 unknown
- CVE-2026-109759 unknown
- CVE-2026-109760 unknown
- CVE-2026-109761 high
- CVE-2026-109762 unknown
- CVE-2026-109763 unknown
- CVE-2026-109764 unknown
- CVE-2026-109765 warning
- CVE-2026-109766 unknown
- CVE-2026-109767 warning
- CVE-2026-109768 high
- CVE-2026-109769 warning
- CVE-2026-109770 unknown
- CVE-2026-109771 warning
- CVE-2026-109772 unknown
- CVE-2026-109773 high
- CVE-2026-109774 unknown
- CVE-2026-109775 high
- CVE-2026-109776 unknown
- CVE-2026-109777 warning
- CVE-2026-109778 critical
- CVE-2026-109779 warning
- CVE-2026-109780 unknown
- CVE-2026-109781 high
Zobrazit více
Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com
Našli jste v popisu této chyby zabezpečení nepřesnost? Dej nám vědět!