جزئیات آسیب‌پذیری
CVE-2026-2776
Red Hat Enterprise Linux 10
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 10.0بحرانی | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳۴- https://bugzilla.mozilla.org/show_bug.cgi?id=2015266
- https://www.mozilla.org/security/advisories/mfsa2026-13/
- https://www.mozilla.org/security/advisories/mfsa2026-14/
- https://www.mozilla.org/security/advisories/mfsa2026-15/
- https://www.mozilla.org/security/advisories/mfsa2026-16/
- https://www.mozilla.org/security/advisories/mfsa2026-17/
- https://access.redhat.com/security/cve/CVE-2026-2776 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2442291 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2776.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:3984 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3976 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:4260 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3361 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3517 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3338 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3515 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3492 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:4432 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3491 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3980 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3495 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3979 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3494 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:4022 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3493 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3983 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:4152 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3978 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3496 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3981 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3497 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3982 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3339 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3516 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۲/۰۵
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۲۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- mozilla
پیش‌بینی بهره‌برداری (EPSS)
۰٫۵۶٪
احتمال بهره‌برداری در ۳۰ روز
۴۶٫۹٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer