8.1

CVE-2026-0877

Mitigation bypass in the DOM: Security component

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox SwEditionesr Version < 115.32.0
Mozilla ≫ Firefox SwEdition- Version < 147.0
Mozilla ≫ Firefox SwEditionesr Version >= 128.0 < 140.7.0
Mozilla ≫ Thunderbird SwEditionesr Version < 140.7.0
Mozilla ≫ Thunderbird SwEdition- Version < 147.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.337
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.1 2.8 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
0b0ca135-0b70-47e7-9f44-1890c2a1c46c 7.5 1.6 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-693 Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

https://bugzilla.mozilla.org/show_bug.cgi?id=1999257
Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026-01/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-02/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-04/
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:0667
https://access.redhat.com/errata/RHSA-2026:0694
https://access.redhat.com/errata/RHSA-2026:0924
https://access.redhat.com/errata/RHSA-2026:1320
https://access.redhat.com/errata/RHSA-2026:1413
https://access.redhat.com/errata/RHSA-2026:1414
https://access.redhat.com/errata/RHSA-2026:1415
https://access.redhat.com/errata/RHSA-2026:1461
https://access.redhat.com/errata/RHSA-2026:1462
https://access.redhat.com/errata/RHSA-2026:1471
https://access.redhat.com/errata/RHSA-2026:1487
https://access.redhat.com/errata/RHSA-2026:2041
https://access.redhat.com/errata/RHSA-2026:2043
https://access.redhat.com/errata/RHSA-2026:2044
https://access.redhat.com/errata/RHSA-2026:2047
https://access.redhat.com/errata/RHSA-2026:2069
https://access.redhat.com/errata/RHSA-2026:2070
https://access.redhat.com/errata/RHSA-2026:2073
https://access.redhat.com/errata/RHSA-2026:2074
https://access.redhat.com/errata/RHSA-2026:2220
https://access.redhat.com/errata/RHSA-2026:2231
https://access.redhat.com/errata/RHSA-2026:2271
https://access.redhat.com/errata/RHSA-2026:2286
https://access.redhat.com/security/cve/CVE-2026-0877
https://bugzilla.redhat.com/show_bug.cgi?id=2428969
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0877.json