PT-2026-102582 · Mozilla · Firefox+2
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Firefox ESR versions prior to 153.4
Firefox versions prior to 157
Thunderbird versions prior to 157
Description
A mitigation bypass exists within the DOM: Service Workers component. Service Workers are scripts that the browser runs in the background, separate from a web page, enabling features such as push notifications and offline access.
Recommendations
Update Firefox ESR to version 153.4.
Update Firefox to version 157.
Update Thunderbird to version 157.
Fix
Protection Mechanism Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Firefox
Firefox Esr
Thunderbird