جزئیات آسیب‌پذیری
CVE-2026-0879
Red Hat Enterprise Linux 10
Sandbox escape due to incorrect boundary conditions in the Graphics component
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.8بحرانی | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳۲- https://bugzilla.mozilla.org/show_bug.cgi?id=2004602
- https://www.mozilla.org/security/advisories/mfsa2026-01/
- https://www.mozilla.org/security/advisories/mfsa2026-02/
- https://www.mozilla.org/security/advisories/mfsa2026-03/
- https://www.mozilla.org/security/advisories/mfsa2026-04/
- https://www.mozilla.org/security/advisories/mfsa2026-05/
- https://access.redhat.com/security/cve/CVE-2026-0879 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2428973 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0879.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:2231 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2271 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2286 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0667 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2220 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2074 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1471 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2073 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1461 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2070 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1487 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2069 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1462 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2047 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1413 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2044 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1415 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2041 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1414 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2043 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1320 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0694 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0924 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۰/۲۳
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۲۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- mozilla
پیش‌بینی بهره‌برداری (EPSS)
۰٫۵٪
احتمال بهره‌برداری در ۳۰ روز
۴۳٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer