ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2026-0880
8.8высокая

CVE-2026-0880

→ есть в БДУ: BDU:2026-03390 (на русском)
Описание (на английском; русское — в БДУ выше)

Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

Затрагиваемое ПО
Mozilla FirefoxMozilla Thunderbird
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Источники
https://bugzilla.mozilla.org/show_bug.cgi?id=2005014https://www.mozilla.org/security/advisories/mfsa2026-01/https://www.mozilla.org/security/advisories/mfsa2026-02/https://www.mozilla.org/security/advisories/mfsa2026-03/https://www.mozilla.org/security/advisories/mfsa2026-04/https://www.mozilla.org/security/advisories/mfsa2026-05/https://access.redhat.com/errata/RHSA-2026:0667https://access.redhat.com/errata/RHSA-2026:0694