PT-2026-33949 · Mozilla+1 · Thunderbird+2

Tomoya Nakanishi · Publicado 2026-04-21 · Atualizado 2026-05-19 · CVE-2026-6763

Positive Technologies (AI Summary) · Pt

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox versões anteriores a 150 Firefox ESR versões anteriores a 140.10 Thunderbird versões anteriores a 150 Thunderbird versões anteriores a 140.10

Description Um bypass de mitigação existe no componente de Manipulação de Arquivos (File Handling).

Recommendations Atualize o Firefox para a versão 150. Atualize o Firefox ESR para a versão 140.10. Atualize o Thunderbird para a versão 150. Atualize o Thunderbird para a versão 140.10.

Correção

DoS

Protection Mechanism Failure

Enumeração de Fraquezas

CWE-693

Identificadores relacionados

ALSA-2026:10757

ALSA-2026:10766

ALSA-2026:10767

ALSA-2026:12285

ALSA-2026:13537

ALSA-2026:15892

ALSA-2026:19348

CVE-2026-6763

OESA-2026-2105

OESA-2026-2106

OESA-2026-2107

OESA-2026-2108

OESA-2026-2109

OPENSUSE-SU-2026:10610-1

OPENSUSE-SU-2026:10626-1

RHSA-2026:10757

RHSA-2026:10766

RHSA-2026:10767

RHSA-2026:19348

Produtos afetados

Firefox

Rocky Linux

Thunderbird

Referências · 192

• https://nvd.nist.gov/vuln/detail/CVE-2026-6750 · Nota de Segurança
• https://bugzilla.mozilla.org/show_bug.cgi?id=2021666 · Nota
• https://suse.com/security/cve/CVE-2026-6755 · Nota
• https://suse.com/security/cve/CVE-2026-6776 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-6763 · Aviso do Fabricante
• https://bugzilla.redhat.com/2460102 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2026:10610-1 · Aviso do Fabricante
• https://bugzilla.redhat.com/2460086 · Nota
• https://errata.rockylinux.org/RLSA-2026:13537 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-6748 · Nota de Segurança
• https://ubuntu.com/security/CVE-2026-6763 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-6748 · Nota
• https://access.redhat.com/security/cve/CVE-2026-7323 · Nota
• https://suse.com/security/cve/CVE-2026-6763 · Nota
• https://suse.com/security/cve/CVE-2026-6765 · Nota