8.8
CVE-2026-8975
- EPSS 0.43%
- Veröffentlicht 19.05.2026 12:30:24
- Zuletzt bearbeitet 30.06.2026 03:21:45
- Quelle security@mozilla.org
- CVE-Watchlists
- Unerledigt
Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151
Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Thunderbird SwEditionesr Version < 140.11
Mozilla ≫ Thunderbird SwEdition- Version < 151.0.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.43% | 0.343 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | 7.5 | 1.6 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
https://www.mozilla.org/security/advisories/mfsa2026-46/
https://www.mozilla.org/security/advisories/mfsa2026-47/
https://www.mozilla.org/security/advisories/mfsa2026-48/
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1860195%2C2029325%2C2029429%2C2029910%2C2035915%2C2038678%2C2038669
https://www.mozilla.org/security/advisories/mfsa2026-51/
https://www.mozilla.org/security/advisories/mfsa2026-50/
https://access.redhat.com/errata/RHSA-2026:21378
https://access.redhat.com/errata/RHSA-2026:21380
https://access.redhat.com/errata/RHSA-2026:21381
https://access.redhat.com/errata/RHSA-2026:21382
https://access.redhat.com/errata/RHSA-2026:22325
https://access.redhat.com/errata/RHSA-2026:22643
https://access.redhat.com/errata/RHSA-2026:26174
https://access.redhat.com/errata/RHSA-2026:26268
https://access.redhat.com/errata/RHSA-2026:26269
https://access.redhat.com/errata/RHSA-2026:26270
https://access.redhat.com/errata/RHSA-2026:26491
https://access.redhat.com/errata/RHSA-2026:26492
https://access.redhat.com/errata/RHSA-2026:26493
https://access.redhat.com/errata/RHSA-2026:26521
https://access.redhat.com/errata/RHSA-2026:26536
https://access.redhat.com/errata/RHSA-2026:26539
https://access.redhat.com/errata/RHSA-2026:26551
https://access.redhat.com/errata/RHSA-2026:26606
https://access.redhat.com/errata/RHSA-2026:26629
https://access.redhat.com/errata/RHSA-2026:26630
https://access.redhat.com/errata/RHSA-2026:27715
https://access.redhat.com/security/cve/CVE-2026-8975
https://bugzilla.redhat.com/show_bug.cgi?id=2479840
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8975.json