Beschreibung
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.
Below is a complete list of vulnerabilities:
- Denial of service vulnerability in the Audio/Video: Playback component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Widget component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the DOM: Navigation component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Storage: Quota Manager component can be exploited remotely to cause denial of service.
- Security vulnerability in the Security: Process Sandboxing component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the DOM: Content Processes component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the JavaScript: WebAssembly component can be exploited remotely to execute arbitrary code.
- Information disclosure vulnerability in the Networking: JAR component can be exploited to obtain sensitive information.
- A remote code execution vulnerability in the Networking: Cache component can be exploited remotely to execute arbitrary code.
- Security vulnerability can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the DOM: Core & HTML component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Storage: IndexedDB component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the Graphics component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the Graphics: Canvas2D component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the XSLT component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Graphics: WebRender component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the Graphics component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the Audio/Video component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Layout: Text and Fonts component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Graphics component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the XUL component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the JavaScript: WebAssembly component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the Internationalization component can be exploited remotely to cause denial of service.
- Information disclosure vulnerability in the Networking component can be exploited to obtain sensitive information.
- A remote code execution vulnerability in the Graphics: WebRender component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Disability Access APIs component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the DLL Services component can be exploited to bypass security restrictions.
- Security vulnerability in the WebExtensions component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Graphics: WebGPU component can be exploited remotely to cause denial of service.
- Security vulnerability in the DOM: Service Workers component can be exploited to bypass security restrictions.
- Security vulnerability in the DevTools component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the JavaScript Engine: JIT component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the CSS Parsing and Computation component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Widget: Gtk component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the XPCOM component can be exploited remotely to cause denial of service.
- Security vulnerability in the Address Bar component can be exploited to bypass security restrictions.
- Security UI vulnerability in the Networking: HTTP component can be exploited to spoof user interface.
- Security vulnerability in the Places component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the JavaScript Engine: JIT component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Storage: StorageManager component can be exploited remotely to cause denial of service.
- Security vulnerability in the Bookmarks & History component can be exploited to bypass security restrictions.
- Security vulnerability in the DOM: Security component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the DOM: UI Events & Focus Handling component can be exploited remotely to execute arbitrary code.
Ursprüngliche Informationshinweise
Betroffene Produkte
CVE Liste
- CVE-2026-100756 unknown
- CVE-2026-100757 critical
- CVE-2026-100758 unknown
- CVE-2026-100759 unknown
- CVE-2026-100760 unknown
- CVE-2026-100762 critical
- CVE-2026-100765 critical
- CVE-2026-100766 warning
- CVE-2026-100767 critical
- CVE-2026-100769 critical
- CVE-2026-100770 critical
- CVE-2026-100771 unknown
- CVE-2026-100772 critical
- CVE-2026-100773 critical
- CVE-2026-100774 critical
- CVE-2026-100775 unknown
- CVE-2026-100776 critical
- CVE-2026-100777 critical
- CVE-2026-100778 critical
- CVE-2026-100779 critical
- CVE-2026-100780 critical
- CVE-2026-100781 unknown
- CVE-2026-100782 critical
- CVE-2026-100783 warning
- CVE-2026-100784 critical
- CVE-2026-100785 critical
- CVE-2026-100786 critical
- CVE-2026-100787 unknown
- CVE-2026-100788 unknown
- CVE-2026-100789 critical
- CVE-2026-100790 critical
- CVE-2026-100791 critical
- CVE-2026-100792 unknown
- CVE-2026-100794 unknown
- CVE-2026-100797 critical
- CVE-2026-100798 unknown
- CVE-2026-100800 critical
- CVE-2026-100801 critical
- CVE-2026-100803 unknown
- CVE-2026-100806 warning
- CVE-2026-100807 critical
- CVE-2026-100808 unknown
- CVE-2026-100809 unknown
- CVE-2026-100811 critical
- CVE-2026-100812 high
- CVE-2026-100814 critical
- CVE-2026-100815 critical
- CVE-2026-100816 unknown
- CVE-2026-100818 critical
- CVE-2026-100819 critical
- CVE-2026-100820 critical
- CVE-2026-100821 unknown
- CVE-2026-100822 unknown
- CVE-2026-100824 critical
- CVE-2026-100825 critical
- CVE-2026-100826 high
- CVE-2026-100828 unknown
- CVE-2026-100829 unknown
- CVE-2026-100830 unknown
- CVE-2026-100831 critical
- CVE-2026-100832 critical
- CVE-2026-96869 warning
Mehr erfahren
Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com
Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!