CVE-2026-6770

Medienbericht

EPSS 0.06%
Veröffentlicht 21.04.2026 12:41:03
Zuletzt bearbeitet 22.04.2026 15:07:23
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

Other issue in the Storage: IndexedDB component

Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

NVD 3 VulnDex Vulnerability Enrichment 3

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwEditionesr Version < 140.10.0

Mozilla ≫ Firefox SwEdition- Version < 150.0

Mozilla ≫ Thunderbird Version < 140.10.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.179

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	3.9	2.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://thehackernews.com/2026/05/weekly-recap-ai-powered-phishing.html

Media Report

https://www.mozilla.org/security/advisories/mfsa2026-30/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2026-32/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=2024220

Permissions Required

https://www.mozilla.org/security/advisories/mfsa2026-33/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2026-34/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-6770

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-6770

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-6770

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-6770