説明
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability in the DOM: Core & HTML component can be exploited remotely to execute arbitrary code.
- Information disclosure vulnerability in the Graphics: Canvas2D component can be exploited to obtain sensitive information.
- Security vulnerability in the Graphics: WebRender component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the WebRTC component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the JavaScript Engine component can be exploited remotely to execute arbitrary code.
- Security vulnerability can be exploited to bypass security restrictions.
- Security UI vulnerability in the DOM: Core & HTML component can be exploited to spoof user interface.
- Denial of service vulnerability in the Libraries component in NSS can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in Firefox ESR 115 can be exploited remotely to execute arbitrary code.
オリジナルアドバイザリー
関連製品
CVEリスト
- CVE-2026-2781 critical
- CVE-2026-6746 critical
- CVE-2026-6749 critical
- CVE-2026-6750 critical
- CVE-2026-6752 high
- CVE-2026-6754 critical
- CVE-2026-6762 unknown
- CVE-2026-6767 high
- CVE-2026-6772 critical
- CVE-2026-6785 unknown
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！