説明
Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Audio/Video: Playback component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Widget component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the DOM: Navigation component can be exploited to bypass security restrictions.
- Denial of service vulnerability in the Storage: Quota Manager component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the DOM: Content Processes component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Graphics component can be exploited remotely to cause denial of service.
- Information disclosure vulnerability in the Networking: JAR component can be exploited to obtain sensitive information.
- A remote code execution vulnerability in the Networking: Cache component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the JavaScript: WebAssembly component can be exploited remotely to execute arbitrary code.
- Security vulnerability can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the DOM: Core & HTML component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Storage: IndexedDB component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the Graphics component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the Graphics: Canvas2D component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the XSLT component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the Graphics: WebRender component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the Audio/Video component can be exploited remotely to cause denial of service.
- A remote code execution vulnerability in the Layout: Text and Fonts component can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in the Graphics component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the JavaScript: WebAssembly component can be exploited remotely to cause denial of service.
- Denial of service vulnerability in the Internationalization component can be exploited remotely to cause denial of service.
- Information disclosure vulnerability in the Networking component can be exploited to obtain sensitive information.
- A remote code execution vulnerability in the Graphics: WebRender component can be exploited remotely to execute arbitrary code.
- Security vulnerability in the DLL Services component can be exploited to bypass security restrictions.
- Security vulnerability in the WebExtensions component can be exploited to bypass security restrictions.
- Security vulnerability in the DOM: Service Workers component can be exploited to bypass security restrictions.
- A remote code execution vulnerability in the Widget: Gtk component can be exploited remotely to execute arbitrary code.
- Denial of service vulnerability in the XPCOM component can be exploited remotely to cause denial of service.
- Security vulnerability in the Address Bar component can be exploited to bypass security restrictions.
オリジナルアドバイザリー
関連製品
CVEリスト
- CVE-2026-92035 critical
- CVE-2026-100756 critical
- CVE-2026-100757 critical
- CVE-2026-100758 critical
- CVE-2026-100759 unknown
- CVE-2026-100762 critical
- CVE-2026-100766 warning
- CVE-2026-100767 critical
- CVE-2026-100769 critical
- CVE-2026-100770 critical
- CVE-2026-100771 unknown
- CVE-2026-100772 critical
- CVE-2026-100773 critical
- CVE-2026-100774 critical
- CVE-2026-100775 unknown
- CVE-2026-100776 critical
- CVE-2026-100777 critical
- CVE-2026-100778 critical
- CVE-2026-100779 critical
- CVE-2026-100780 critical
- CVE-2026-100781 unknown
- CVE-2026-100782 critical
- CVE-2026-100783 warning
- CVE-2026-100784 critical
- CVE-2026-100785 critical
- CVE-2026-100786 critical
- CVE-2026-100788 unknown
- CVE-2026-100789 critical
- CVE-2026-100790 critical
- CVE-2026-100791 critical
- CVE-2026-100792 unknown
- CVE-2026-100794 unknown
- CVE-2026-100797 critical
- CVE-2026-100801 critical
- CVE-2026-100803 unknown
- CVE-2026-100807 critical
- CVE-2026-100811 critical
- CVE-2026-100818 critical
- CVE-2026-100819 critical
- CVE-2026-100820 critical
- CVE-2026-100821 unknown
- CVE-2026-100832 critical
- CVE-2026-96869 warning
- CVE-2026-103500 unknown
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！