PT-2026-2642 · Mozilla+4 · Firefox Esr+5

Oskar L · Publicado 2026-01-13 · Atualizado 2026-03-18 · CVE-2026-0880

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Nome do Software Vulnerável e Versões Afetadas Firefox versões anteriores a 147 Firefox ESR versões anteriores a 115.32 Firefox ESR versões anteriores a 140.7

Descrição Uma vulnerabilidade existe devido a um estouro de inteiro no componente de gráficos, o que pode permitir a fuga do sandbox.

Recomendações Atualize o Firefox para a versão 147 ou posterior. Atualize o Firefox ESR para a versão 115.32 ou posterior. Atualize o Firefox ESR para a versão 140.7 ou posterior.

Correção

DoS

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALSA-2026:0667

ALSA-2026:0694

ALSA-2026:0924

ALSA-2026:2220

ALSA-2026:2271

ALSA-2026:2286

BDU:2026-03390

CVE-2026-0880

MGASA-2026-0013

MGASA-2026-0014

OESA-2026-1085

OESA-2026-1086

OESA-2026-1087

OESA-2026-1088

OESA-2026-1089

OESA-2026-1090

OESA-2026-1264

OESA-2026-1285

OPENSUSE-SU-2026:10037-1

OPENSUSE-SU-2026:10046-1

OPENSUSE-SU-2026:10058-1

OPENSUSE-SU-2026:20041-1

OPENSUSE-SU-2026:20391-1

RHSA-2026:0667

RHSA-2026:0694

RHSA-2026:0924

RHSA-2026:1320

RHSA-2026:1413

RHSA-2026:1414

RHSA-2026:1415

RHSA-2026:1461

RHSA-2026:1462

RHSA-2026:1471

RHSA-2026:1487

RHSA-2026:2041

RHSA-2026:2043

RHSA-2026:2044

RHSA-2026:2047

RHSA-2026:2069

RHSA-2026:2070

RHSA-2026:2073

RHSA-2026:2074

RHSA-2026:2220

RHSA-2026:2231

RHSA-2026:2271

RHSA-2026:2286

SUSE-SU-2026:0122-1

SUSE-SU-2026:0153-1

SUSE-SU-2026:0260-1

SUSE-SU-2026:20086-1

USN-7991-1

Produtos afetados

Firefox

Firefox Esr

Linuxmint

Red Os

Rocky Linux

Ubuntu

Referências · 321

• https://bugzilla.redhat.com/2428969 · Nota
• https://ubuntu.com/security/CVE-2025-9184 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-6427 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-6433 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-2771 · Nota
• https://suse.com/support/update/announcement/2026/suse-su-202620086-1 · Nota
• https://suse.com/support/update/announcement/2026/suse-su-20260122-1 · Nota
• https://suse.com/security/cve/CVE-2026-2784 · Nota
• https://ubuntu.com/security/CVE-2025-9180 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-11715 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-0241 · Aviso do Fabricante
• https://mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0880 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-13019 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-0818 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-13013 · Aviso do Fabricante