CVE-2026-6761

EPSS 0.04%
Veröffentlicht 21.04.2026 12:40:56
Zuletzt bearbeitet 22.04.2026 14:56:13
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

Privilege escalation in the Networking component

Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

NVD 3 VulnDex Vulnerability Enrichment 3

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwEditionesr Version < 140.10.0

Mozilla ≫ Firefox SwEdition- Version < 150.0

Mozilla ≫ Thunderbird SwEditionesr Version < 140.10.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.133

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://www.mozilla.org/security/advisories/mfsa2026-30/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2026-32/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=2017857

Permissions Required

https://www.mozilla.org/security/advisories/mfsa2026-33/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2026-34/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-6761

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-6761

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-6761

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-6761