جزئیات آسیب‌پذیری
CVE-2026-8975
Red Hat Enterprise Linux 10
Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.8بالا | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳۰- https://bugzilla.mozilla.org/buglist.cgi?bug_id=1860195%2C2029325%2C2029429%2C2029910%2C2035915%2C2038678%2C2038669
- https://www.mozilla.org/security/advisories/mfsa2026-46/
- https://www.mozilla.org/security/advisories/mfsa2026-47/
- https://www.mozilla.org/security/advisories/mfsa2026-48/
- https://www.mozilla.org/security/advisories/mfsa2026-50/
- https://www.mozilla.org/security/advisories/mfsa2026-51/
- https://access.redhat.com/security/cve/CVE-2026-8975 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2479840 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8975.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:26551 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27715 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26539 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21380 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22325 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21382 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22643 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26629 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26270 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26606 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26536 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26630 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26268 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26491 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26269 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26493 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26174 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26492 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26521 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21378 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21381 vendor-advisoryx_refsource_REDHAT
کانال تلگرام کُلون @kolunsec_fa
تازه‌های KEV، خبرهای مهم و خلاصه‌ی روزانه
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۲/۲۹
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۷/۲۹
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- mozilla
پیش‌بینی بهره‌برداری (EPSS)
۰٫۴۷٪
احتمال بهره‌برداری در ۳۰ روز
۴۰٫۹٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-787Out-of-bounds Write