PT-2026-30822 · Mozilla+1 · Thunderbird Esr+4

Brian Grinstead + 2 · Publicado 2026-04-07 · Atualizado 2026-04-25 · CVE-2026-5731

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versões anteriores a 149.0.2 Firefox ESR versões anteriores a 115.34.1 e 140.9.1 Thunderbird versões anteriores a 149.0.2 e 140.9.1

Description Bugs de segurança de memória estão presentes no Firefox e Thunderbird, com alguns mostrando evidências de corrupção de memória. Esses bugs poderiam potencialmente ser explorados para executar código arbitrário.

Recommendations Atualize o Firefox para a versão 149.0.2 ou posterior. Atualize o Firefox ESR para a versão 115.34.1 ou 140.9.1 ou posterior. Atualize o Thunderbird para a versão 149.0.2 ou posterior. Atualize o Thunderbird ESR para a versão 140.9.1 ou posterior.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALSA-2026:7671

ALSA-2026:7672

ALSA-2026:8052

ALSA-2026:8459

ALSA-2026:9345

ALSA-2026:9638

BDU:2026-04920

CVE-2026-5731

OESA-2026-1874

OESA-2026-1875

OESA-2026-1876

OESA-2026-1877

OESA-2026-1878

OESA-2026-2109

OPENSUSE-SU-2026:10501-1

OPENSUSE-SU-2026:10503-1

OPENSUSE-SU-2026:10511-1

OPENSUSE-SU-2026:20486-1

RHSA-2026:11805

RHSA-2026:11813

RHSA-2026:12264

RHSA-2026:13342

RHSA-2026:13412

RHSA-2026:13533

RHSA-2026:13582

RHSA-2026:13583

RHSA-2026:13596

RHSA-2026:13600

RHSA-2026:13665

RHSA-2026:13682

RHSA-2026:13683

RHSA-2026:13922

RHSA-2026:13977

RHSA-2026:14223

RHSA-2026:14303

RHSA-2026:15889

RHSA-2026:7671

RHSA-2026:7672

RHSA-2026:8052

RHSA-2026:8459

RHSA-2026:9345

RHSA-2026:9638

SUSE-SU-2026:1273-1

SUSE-SU-2026:1322-1

SUSE-SU-2026:1379-1

SUSE-SU-2026:21157-1

Produtos afetados

Firefox

Firefox Esr

Rocky Linux

Thunderbird

Thunderbird Esr

Referências · 121

• https://bugzilla.suse.com/1261663 · Nota
• https://mozilla.org/en-US/security/advisories/mfsa2026-29 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2026-33636 · Nota
• https://access.redhat.com/security/cve/CVE-2026-33416 · Nota
• https://suse.com/support/update/announcement/2026/suse-su-20261322-1 · Nota
• https://access.redhat.com/errata/RHSA-2026:9638 · Nota
• https://errata.almalinux.org/10/ALSA-2026-7672.html · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2026:10511-1 · Aviso do Fabricante
• https://mozilla.org/en-US/security/advisories/mfsa2026-27 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2026:21157-1 · Aviso do Fabricante
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=2021894%2C2022225%2C2022252%2C2022294%2C2023007%2C2023130%2C2023191%2C2023364%2C2023829%2C2024074%2C2024417%2C2024433%2C2024436%2C2024437%2C2024453%2C2024461%2C2024462%2C2024472%2C2024474%2C2024477%2C2025364%2C2025401%2C2025402%2C2025472%2C2026287%2C2026299%2C2026305%2C2026426 · Nota
• https://mozilla.org/security/advisories/mfsa2026-29 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-5731 · Aviso do Fabricante
• https://bugzilla.redhat.com/2455897 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-6769 · Nota de Segurança