Multiple vulnerabilities in Mozilla Firefox ESR

Описание

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in the Audio/Video: Web Codecs component can be exploited remotely to cause denial of service.
2. Denial of service vulnerability in the JavaScript Engine: JIT component can be exploited remotely to cause denial of service.
3. A remote code execution vulnerability in the DOM: Bindings (WebIDL) component can be exploited remotely to execute arbitrary code.
4. Denial of service vulnerability in the JavaScript Engine component can be exploited remotely to cause denial of service.
5. Security vulnerability in the Profile Backup component can be exploited to bypass security restrictions.
6. A remote code execution vulnerability in the Disability Access APIs component can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Thunderbird 140 can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

• MFSA2026-47
  

Эксплуатация

Связанные продукты

• Mozilla-Firefox-ESR

Список CVE

• CVE-2026-8388
  high
• CVE-2026-8391
  high
• CVE-2026-8401
  critical
• CVE-2026-8946
  critical
• CVE-2026-8947
  high
• CVE-2026-8953
  critical
• CVE-2026-8975
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com