Multiple vulnerabilities in Mozilla Firefox ESR

説明

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. Memory safety bug fixed in Firefox 152
2. A remote code execution vulnerability in Firefox ESR 140 can be exploited remotely to execute arbitrary code.
3. Memory safety bug fixed in Thunderbird
4. Security vulnerability in the Security: Process Sandboxing component can be exploited to bypass security restrictions.
5. Security vulnerability in the Networking: Cookies component can be exploited to bypass security restrictions.
6. Security vulnerability in the DOM: Security component can be exploited to bypass security restrictions.
7. Denial of service vulnerability in the Graphics: CanvasWebGL component can be exploited remotely to cause denial of service.
8. Denial of service vulnerability in the Web Audio component can be exploited remotely to cause denial of service.

オリジナルアドバイザリー

• MFSA2026-58

関連製品

• Mozilla-Firefox-ESR

CVEリスト

• CVE-2026-12292
  critical
• CVE-2026-12296
  critical
• CVE-2026-12298
  critical
• CVE-2026-12304
  critical
• CVE-2026-12305
  critical
• CVE-2026-12306
  high
• CVE-2026-12307
  high
• CVE-2026-12308
  high
• CVE-2026-12309
  high
• CVE-2026-12310
  critical
• CVE-2026-12311
  warning
• CVE-2026-12312
  critical
• CVE-2026-12313
  warning
• CVE-2026-12314
  critical
• CVE-2026-12315
  critical
• CVE-2026-12324
  high
• CVE-2026-12327
  critical
• CVE-2026-12329
  critical

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com