CVE-2026-0879

EPSS 0.53%
Veröffentlicht 13.01.2026 13:30:54
Zuletzt bearbeitet 30.06.2026 03:17:04
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

Sandbox escape due to incorrect boundary conditions in the Graphics component

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 35

NVD 5 VulnDex Vulnerability Enrichment 3

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwEditionesr Version < 115.32.0

Mozilla ≫ Firefox SwEdition- Version < 147.0

Mozilla ≫ Firefox SwEditionesr Version >= 128.0 < 140.7.0

Mozilla ≫ Thunderbird SwEditionesr Version < 140.7.0

Mozilla ≫ Thunderbird SwEdition- Version < 147.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.53%	0.405

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0b0ca135-0b70-47e7-9f44-1890c2a1c46c	7.5	1.6	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://www.mozilla.org/security/advisories/mfsa2026-01/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2026-02/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2026-03/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=2004602

Permissions Required

https://www.mozilla.org/security/advisories/mfsa2026-05/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2026-04/

Vendor Advisory

https://access.redhat.com/errata/RHSA-2026:0667

https://access.redhat.com/errata/RHSA-2026:0694

https://access.redhat.com/errata/RHSA-2026:0924

https://access.redhat.com/errata/RHSA-2026:1320

https://access.redhat.com/errata/RHSA-2026:1413

https://access.redhat.com/errata/RHSA-2026:1414

https://access.redhat.com/errata/RHSA-2026:1415

https://access.redhat.com/errata/RHSA-2026:1461

https://access.redhat.com/errata/RHSA-2026:1462

https://access.redhat.com/errata/RHSA-2026:1471

https://access.redhat.com/errata/RHSA-2026:1487

https://access.redhat.com/errata/RHSA-2026:2041

https://access.redhat.com/errata/RHSA-2026:2043

https://access.redhat.com/errata/RHSA-2026:2044

https://access.redhat.com/errata/RHSA-2026:2047

https://access.redhat.com/errata/RHSA-2026:2069

https://access.redhat.com/errata/RHSA-2026:2070

https://access.redhat.com/errata/RHSA-2026:2073

https://access.redhat.com/errata/RHSA-2026:2074

https://access.redhat.com/errata/RHSA-2026:2220

https://access.redhat.com/errata/RHSA-2026:2231

https://access.redhat.com/errata/RHSA-2026:2271

https://access.redhat.com/errata/RHSA-2026:2286

https://access.redhat.com/security/cve/CVE-2026-0879

https://bugzilla.redhat.com/show_bug.cgi?id=2428973

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0879.json

https://nvd.nist.gov/vuln/detail/CVE-2026-0879

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-0879

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-0879

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-0879