PT-2026-38432 · Mozilla · Firefox Esr

Michael Froman · Publicado 2026-05-07 · Atualizado 2026-05-26 · CVE-2026-8094

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas Firefox ESR versões anteriores a 140.10.2

Descrição Existe um problema no componente WebRTC (Web Real-Time Communication), que permite a comunicação em tempo real entre navegadores sem a necessidade de plugins.

Recomendações Atualize para a versão 140.10.2 do Firefox ESR.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

ALSA-2026:19160

ALSA-2026:20566

ALSA-2026:20574

CVE-2026-8094

OESA-2026-2292

OESA-2026-2349

OESA-2026-2350

OESA-2026-2351

OESA-2026-2352

OPENSUSE-SU-2026:10720-1

OPENSUSE-SU-2026:10738-1

RHSA-2026:19160

RHSA-2026:20566

RHSA-2026:20574

Produtos afetados

Firefox Esr

Referências · 50

• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2350 · Nota
• https://mozilla.org/security/advisories/mfsa2026-41 · Aviso do Fabricante
• https://mozilla.org/security/advisories/mfsa2026-44 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2026-8092 · Nota
• https://twitter.com/lyrie_ai/status/2055143937434702317 · Publicação no Twitter
• https://mozilla.org/security/advisories/mfsa2026-44/#CVE-2026-8094 · Aviso do Fabricante
• https://twitter.com/lyrie_ai/status/2055143938449703268 · Publicação no Twitter
• https://security-tracker.debian.org/tracker/CVE-2026-8094 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2026-2350 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2026-2349 · Aviso do Fabricante
• https://errata.almalinux.org/9/ALSA-2026-20574.html · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2026-2351 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2026:20566 · Nota
• https://twitter.com/CVEnew/status/2052400766602949108 · Publicação no Twitter
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2349 · Nota