جزئیات آسیب‌پذیری
CVE-2026-0880
Red Hat Enterprise Linux 10
Sandbox escape due to integer overflow in the Graphics component
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.8بالا | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳۲- https://access.redhat.com/errata/RHSA-2026:1415 vendor-advisoryx_refsource_REDHAT
- https://bugzilla.mozilla.org/show_bug.cgi?id=2005014
- https://www.mozilla.org/security/advisories/mfsa2026-01/
- https://www.mozilla.org/security/advisories/mfsa2026-02/
- https://www.mozilla.org/security/advisories/mfsa2026-03/
- https://www.mozilla.org/security/advisories/mfsa2026-04/
- https://www.mozilla.org/security/advisories/mfsa2026-05/
- https://access.redhat.com/security/cve/CVE-2026-0880 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2428975 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0880.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:2231 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2271 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2286 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0667 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2220 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2074 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1471 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2073 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1461 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2070 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1487 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2069 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1462 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2047 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1413 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2044 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2041 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1414 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2043 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:1320 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0694 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0924 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۰/۲۳
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۲۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- mozilla
پیش‌بینی بهره‌برداری (EPSS)
۰٫۵۴٪
احتمال بهره‌برداری در ۳۰ روز
۴۵٫۷٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-190Integer Overflow or Wraparound