PT-2026-33936 · Mozilla+2 · Thunderbird+3

Choeseyeong · CVE-2026-6750 · Publicado 2026-04-21 · Atualizado 2026-07-25

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versões anteriores a 150 Firefox ESR versões anteriores a 115.35 Firefox ESR versões anteriores a 140.10 Thunderbird versões anteriores a 150 Thunderbird versões anteriores a 140.10

Description Escalação de privilégios é possível no componente Graphics: WebRender.

Recommendations Atualizar para a versão 150 Atualizar para a versão 115.35 Atualizar para a versão 140.10 Atualizar para a versão 150 Atualizar para a versão 140.10

Correção

LPE

DoS

Improper Privilege Management

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-269

CWE-266

Identificadores relacionados

ALSA-2026:10757

ALSA-2026:10766

ALSA-2026:10767

ALSA-2026:12285

ALSA-2026:13537

ALSA-2026:15892

ALSA-2026:19348

BDU:2026-08459

CVE-2026-6750

OESA-2026-2105

OESA-2026-2106

OESA-2026-2107

OESA-2026-2108

OESA-2026-2109

OPENSUSE-SU-2026:10610-1

OPENSUSE-SU-2026:10626-1

OPENSUSE-SU-2026:11373-1

RHSA-2026:10757

RHSA-2026:10766

RHSA-2026:10767

RHSA-2026:19348

Produtos afetados

Firefox

Red Os

Rocky Linux

Thunderbird

Referências · 417

• https://access.redhat.com/security/cve/CVE-2026-6769 · Nota
• https://access.redhat.com/security/cve/CVE-2026-6747 · Nota
• https://bugzilla.redhat.com/2460085 · Nota
• https://twitter.com/VulmonFeeds/status/2046669174169088375 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2025-9187 · Nota
• https://mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6750 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2026:13537 · Aviso do Fabricante
• https://errata.almalinux.org/8/ALSA-2026-13537.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-8969 · Nota
• https://suse.com/security/cve/CVE-2026-0881 · Nota
• https://access.redhat.com/security/cve/CVE-2026-6751 · Nota
• https://errata.almalinux.org/9/ALSA-2026-19348.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-0889 · Nota
• https://suse.com/security/cve/CVE-2026-6783 · Nota
• https://suse.com/security/cve/CVE-2024-9403 · Nota