جزئیات آسیب‌پذیری
CVE-2026-7323
Red Hat Enterprise Linux 10
Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.3بالا | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳۰- https://bugzilla.mozilla.org/buglist.cgi?bug_id=2028537%2C2029911%2C2031121%2C2033602
- https://www.mozilla.org/security/advisories/mfsa2026-35/
- https://www.mozilla.org/security/advisories/mfsa2026-36/
- https://www.mozilla.org/security/advisories/mfsa2026-38/
- https://www.mozilla.org/security/advisories/mfsa2026-39/
- https://access.redhat.com/security/cve/CVE-2026-7323 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2463481 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7323.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:22708 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22408 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24719 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19157 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19153 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19588 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20586 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22712 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24718 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24345 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25014 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22847 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24717 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21743 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22410 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24844 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22324 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24846 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22409 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24721 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19370 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19348 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۲/۰۸
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۲۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- mozilla
پیش‌بینی بهره‌برداری (EPSS)
۰٫۳۷٪
احتمال بهره‌برداری در ۳۰ روز
۳۱٫۶٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-787Out-of-bounds Write