PT-2026-21699 · Mozilla+1 · Firefox Esr+3

André Bargull · CVE-2026-2766 · Publicado 2026-01-01 · Atualizado 2026-04-16

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas Versões do Firefox anteriores à 148 Versões do Firefox ESR anteriores à 140.8 Versões do Thunderbird anteriores à 148 Versões do Thunderbird anteriores à 140.8

Descrição Existe uma vulnerabilidade de use-after-free no componente JIT do mecanismo JavaScript. Isso pode potencialmente permitir comportamentos inesperados.

Recomendações Atualize o Firefox para a versão 148 ou posterior. Atualize o Firefox ESR para a versão 140.8 ou posterior. Atualize o Thunderbird para a versão 148 ou posterior. Atualize o Thunderbird para a versão 140.8 ou posterior.

Correção

DoS

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALSA-2026:3338

ALSA-2026:3339

ALSA-2026:3361

ALSA-2026:3515

ALSA-2026:3516

ALSA-2026:3517

CVE-2026-2766

MGASA-2026-0052

MGASA-2026-0053

OESA-2026-1471

OESA-2026-1472

OESA-2026-1473

OESA-2026-1474

OESA-2026-1539

OESA-2026-1540

OPENSUSE-SU-2026:10242-1

OPENSUSE-SU-2026:10248-1

OPENSUSE-SU-2026:10257-1

OPENSUSE-SU-2026:20365-1

OPENSUSE-SU-2026:20391-1

RHSA-2026:3338

RHSA-2026:3339

RHSA-2026:3361

RHSA-2026:3491

RHSA-2026:3492

RHSA-2026:3493

RHSA-2026:3494

RHSA-2026:3495

RHSA-2026:3496

RHSA-2026:3497

RHSA-2026:3515

RHSA-2026:3516

RHSA-2026:3517

RHSA-2026:3976

RHSA-2026:3978

RHSA-2026:3979

RHSA-2026:3980

RHSA-2026:3981

RHSA-2026:3982

RHSA-2026:3983

RHSA-2026:3984

RHSA-2026:4022

RHSA-2026:4152

RHSA-2026:4260

RHSA-2026:4432

SUSE-SU-2026:0812-1

SUSE-SU-2026:0871-1

SUSE-SU-2026:0880-1

Produtos afetados

Firefox

Firefox Esr

Rocky Linux

Thunderbird

Referências · 291

• https://osv.dev/vulnerability/ALSA-2026:3516 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2026-2766 · Nota de Segurança
• https://suse.com/security/cve/CVE-2026-2803 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2786 · Nota de Segurança
• https://bugzilla.redhat.com/2442316 · Nota
• https://access.redhat.com/security/cve/CVE-2026-2779 · Nota
• https://access.redhat.com/security/cve/CVE-2026-2792 · Nota
• https://mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2766 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-2802 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2764 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-2772 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2026-2776 · Nota
• https://bugzilla.redhat.com/2442295 · Nota
• https://suse.com/security/cve/CVE-2026-2806 · Nota
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2766.json · Nota