説明
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.
Below is a complete list of vulnerabilities:
- Security vulnerability in the Remote Settings Client component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the JavaScript: GC component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the DOM: Navigation component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Audio/Video component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the DOM: Security component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Graphics: WebGPU component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the DOM: Core & HTML component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the Application Update component can be exploited to bypass security restrictions.
- Security vulnerability can be exploited to bypass security restrictions.
- Information disclosure vulnerability in the Graphics: WebGPU component can be exploited to obtain sensitive information.
- Denial of service vulnerability in the Graphics component can be exploited remotely to cause denial of service.
- Information disclosure vulnerability in the Networking: HTTP component can be exploited to obtain sensitive information.
- Denial of service vulnerability in the Profile Backup component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the DOM: Navigation component can be exploited remotely to cause denial of service.
- Security UI vulnerability in the DOM: Core & HTML component can be exploited to spoof user interface.
- A remote code execution vulnerability in the Graphics: ImageLib component can be exploited remotely to execute arbitrary code.
オリジナルアドバイザリー
関連製品
CVEリスト
- CVE-2026-74952 critical
- CVE-2026-75874 critical
- CVE-2026-84118 high
- CVE-2026-84119 critical
- CVE-2026-84120 high
- CVE-2026-84121 critical
- CVE-2026-84122 high
- CVE-2026-84123 critical
- CVE-2026-84124 high
- CVE-2026-84125 high
- CVE-2026-84129 unknown
- CVE-2026-84130 unknown
- CVE-2026-84131 critical
- CVE-2026-84132 unknown
- CVE-2026-84133 unknown
- CVE-2026-84134 unknown
- CVE-2026-84136 unknown
- CVE-2026-84137 unknown
- CVE-2026-84139 unknown
- CVE-2026-84140 unknown
- CVE-2026-84141 unknown
- CVE-2026-84143 unknown
- CVE-2026-84144 unknown
- CVE-2026-84145 critical
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！