PT-2026-84172 · Mozilla+1 · Thunderbird+2

·

CVE-2026-84119

·

تاريخ النشر

2026-09-01

·

تاريخ التحديث

2026-09-30

CVSS v3.1

10

حرجة

المتجهAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 115.40 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 140.15 Thunderbird versions prior to 153.2
Description A use-after-free issue exists in the DOM: Navigation component, which can lead to a sandbox escape. A use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.
Recommendations Update Firefox to version 155. Update Firefox ESR to version 115.40. Update Firefox ESR to version 140.15. Update Firefox ESR to version 153.2. Update Thunderbird to version 155. Update Thunderbird to version 140.15. Update Thunderbird to version 153.2.

إصلاح

Use After Free

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

ALSA-2026:67129
ALSA-2026:67133
ALSA-2026:68549
ALSA-2026:70642
ALSA-2026:73130
ALSA-2026:73971
CVE-2026-84119
OESA-2026-3789
OESA-2026-3790
OESA-2026-3791
OESA-2026-3842
OESA-2026-3896
OESA-2026-3982
OPENSUSE-SU-2026:11666-1
OPENSUSE-SU-2026:11677-1
OPENSUSE-SU-2026:11678-1
OPENSUSE-SU-2026:21853-1
SUSE-SU-2026:23784-1
SUSE-SU-2026:4140-1
SUSE-SU-2026:4156-1
SUSE-SU-2026:4268-1

المنتجات المتأثرة

Firefox
Rocky Linux
Thunderbird