説明
Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information.
Below is a complete list of vulnerabilities:
- Denial of service vulnerability in MIME header parser for forwarding can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the JavaScript: WebAssembly component can be exploited remotely to cause denial of service.
- Security vulnerability can be exploited to bypass security restrictions.
- Security vulnerability in the DOM: Navigation component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Audio/Video: cubeb component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the WebRTC: Audio/Video component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the DOM: Navigation component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Disability Access APIs component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the DOM: Bindings (WebIDL) component can be exploited remotely to cause denial of service.
- Information disclosure vulnerability in the Graphics: ImageLib component can be exploited to obtain sensitive information.
- A remote code execution vulnerability in the JavaScript: WebAssembly component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Graphics component can be exploited remotely to cause denial of service.
- Information disclosure vulnerability in the Framework component in DevTools can be exploited to obtain sensitive information.
- Security vulnerability in the PDF Viewer component can be exploited to bypass security restrictions.
- Security vulnerability in the DOM: Content Processes component can be exploited to bypass security restrictions.
- Security vulnerability in the Networking: DNS component can be exploited to bypass security restrictions.
- Security vulnerability in the DOM: Networking component can be exploited to bypass security restrictions.
- Security vulnerability in the Enterprise Policies component can be exploited to bypass security restrictions.
- Information disclosure vulnerability in the Storage: IndexedDB component can be exploited to obtain sensitive information.
- Denial of service vulnerability in the Audio/Video: GMP component can be exploited remotely to cause denial of service.
- Security vulnerability in WebExtensions can be exploited to bypass security restrictions.
- Information disclosure vulnerability in the Networking: WebSockets component can be exploited to obtain sensitive information.
- A remote code execution vulnerability in Firefox ESR 140 can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Firefox ESR 115 can be exploited remotely to execute arbitrary code.
オリジナルアドバイザリー
CVEリスト
- CVE-2026-15718 warning
- CVE-2026-15719 high
- CVE-2026-16349 critical
- CVE-2026-16350 critical
- CVE-2026-16351 critical
- CVE-2026-16352 critical
- CVE-2026-16353 critical
- CVE-2026-16354 critical
- CVE-2026-16355 critical
- CVE-2026-16356 critical
- CVE-2026-16357 critical
- CVE-2026-16358 critical
- CVE-2026-16359 critical
- CVE-2026-16360 critical
- CVE-2026-16361 critical
- CVE-2026-16362 critical
- CVE-2026-16363 critical
- CVE-2026-16368 critical
- CVE-2026-16369 critical
- CVE-2026-16371 critical
- CVE-2026-16374 critical
- CVE-2026-16375 critical
- CVE-2026-16377 critical
- CVE-2026-16379 critical
- CVE-2026-16381 critical
- CVE-2026-16383 critical
- CVE-2026-16387 critical
- CVE-2026-16390 critical
- CVE-2026-16391 critical
- CVE-2026-16396 critical
- CVE-2026-16405 critical
- CVE-2026-16412 critical
- CVE-2026-14899 unknown
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！