ГлавнаяУязвимости → CVE-2026-2777
9.8критическая

CVE-2026-2777

Описание

Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

Затрагиваемое ПО
Mozilla FirefoxMozilla Thunderbird
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://bugzilla.mozilla.org/show_bug.cgi?id=2015305https://www.mozilla.org/security/advisories/mfsa2026-13/https://www.mozilla.org/security/advisories/mfsa2026-14/https://www.mozilla.org/security/advisories/mfsa2026-15/https://www.mozilla.org/security/advisories/mfsa2026-16/https://www.mozilla.org/security/advisories/mfsa2026-17/https://access.redhat.com/errata/RHSA-2026:3338https://access.redhat.com/errata/RHSA-2026:3339