جزئیات آسیب‌پذیری
CVE-2026-6753
Red Hat Enterprise Linux 10
Incorrect boundary conditions in the WebRTC component
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.3بالا | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳۵- https://bugzilla.mozilla.org/show_bug.cgi?id=2027501
- https://www.mozilla.org/security/advisories/mfsa2026-30/
- https://www.mozilla.org/security/advisories/mfsa2026-32/
- https://www.mozilla.org/security/advisories/mfsa2026-33/
- https://www.mozilla.org/security/advisories/mfsa2026-34/
- https://access.redhat.com/security/cve/CVE-2026-6753 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2460092 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6753.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:19704 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17690 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19463 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10767 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12285 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19041 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19131 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10766 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13537 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19655 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19465 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19542 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19466 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17477 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19467 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17687 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19468 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17689 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19461 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19464 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19469 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17688 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19462 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10757 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:15892 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19201 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19348 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۲/۰۱
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۲۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- mozilla
پیش‌بینی بهره‌برداری (EPSS)
۰٫۳٪
احتمال بهره‌برداری در ۳۰ روز
۲۳٫۵٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-787Out-of-bounds Write