PT-2026-30823 · Mozilla+2 · Firefox Esr+4

Sajeeb Lohani · Publicado 2026-04-07 · Atualizado 2026-06-09 · CVE-2026-5732

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versões anteriores a 149.0.2 Firefox ESR versões anteriores a 140.9.1 Thunderbird versões anteriores a 149.0.2 Thunderbird versões anteriores a 140.9.1

Description O software contém condições de contorno incorretas e estouro de inteiro dentro do componente Graphics: Text.

Recommendations Atualize o Firefox para a versão 149.0.2 ou posterior. Atualize o Firefox ESR para a versão 140.9.1 ou posterior. Atualize o Thunderbird para a versão 149.0.2 ou posterior. Atualize o Thunderbird para a versão 140.9.1 ou posterior.

Correção

DoS

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALSA-2026:7671

ALSA-2026:7672

ALSA-2026:8052

ALSA-2026:8459

ALSA-2026:9345

ALSA-2026:9638

BDU:2026-04975

CVE-2026-5732

OESA-2026-1874

OESA-2026-1875

OESA-2026-1876

OESA-2026-1877

OESA-2026-1878

OESA-2026-2109

OPENSUSE-SU-2026:10501-1

OPENSUSE-SU-2026:10503-1

OPENSUSE-SU-2026:10511-1

OPENSUSE-SU-2026:20486-1

RHSA-2026:11805

RHSA-2026:11813

RHSA-2026:12264

RHSA-2026:13342

RHSA-2026:13412

RHSA-2026:13533

RHSA-2026:13582

RHSA-2026:13583

RHSA-2026:13596

RHSA-2026:13600

RHSA-2026:13665

RHSA-2026:13682

RHSA-2026:13683

RHSA-2026:13922

RHSA-2026:13977

RHSA-2026:14223

RHSA-2026:14303

RHSA-2026:15889

RHSA-2026:7671

RHSA-2026:7672

RHSA-2026:8052

RHSA-2026:8459

RHSA-2026:9345

RHSA-2026:9638

SUSE-SU-2026:1273-1

SUSE-SU-2026:1322-1

SUSE-SU-2026:1379-1

SUSE-SU-2026:21157-1

Produtos afetados

Firefox

Firefox Esr

Red Os

Rocky Linux

Thunderbird

Referências · 124

• https://access.redhat.com/errata/RHSA-2026:7672 · Nota
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-thunderbird-cve-2026-5732-8.0 · Nota
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1877 · Nota
• https://bugzilla.redhat.com/2451805 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-6746 · Nota de Segurança
• https://errata.rockylinux.org/RLSA-2026:9345 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2026:1379-1 · Aviso do Fabricante
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1874 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-5732 · Aviso do Fabricante
• https://errata.almalinux.org/9/ALSA-2026-8459.html · Aviso do Fabricante
• https://bugzilla.redhat.com/2455897 · Nota
• https://security-tracker.debian.org/tracker/CVE-2026-5732 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALSA-2026:8459 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-5731 · Nota
• https://osv.dev/vulnerability/OESA-2026-1874 · Aviso do Fabricante