6.5
CVE-2026-6770
- EPSS 4.94%
- Veröffentlicht 21.04.2026 12:41:03
- Zuletzt bearbeitet 22.04.2026 15:07:23
- Quelle security@mozilla.org
- CVE-Watchlists
- Unerledigt
Other issue in the Storage: IndexedDB component
Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.94% | 0.91 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 6.5 | 3.9 | 2.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://www.mozilla.org/security/advisories/mfsa2026-30/
https://www.mozilla.org/security/advisories/mfsa2026-32/
https://bugzilla.mozilla.org/show_bug.cgi?id=2024220
https://www.mozilla.org/security/advisories/mfsa2026-33/
https://www.mozilla.org/security/advisories/mfsa2026-34/