PT-2026-49658 · Mozilla+1 · Firefox+3

Choeseyeong · CVE-2026-12289 · Publicado 2026-06-16 · Atualizado 2026-07-10

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas Firefox versões anteriores a 152 Firefox ESR versões anteriores a 140.12 Firefox ESR versões anteriores a 115.37 Thunderbird versões anteriores a 152 Thunderbird versões anteriores a 140.12

Description A escalação de privilégios é possível no componente Graphics: WebRender.

Recommendations Atualize para a versão 152 do Firefox. Atualize para a versão 140.12 do Firefox ESR. Atualize para a versão 115.37 do Firefox ESR. Atualize para a versão 152 do Thunderbird. Atualize para a versão 140.12 do Thunderbird.

Correção

LPE

DoS

Improper Privilege Management

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-269

CWE-266

Identificadores relacionados

ALSA-2026:27717

ALSA-2026:27733

ALSA-2026:27734

ALSA-2026:29940

ALSA-2026:30846

ALSA-2026:33445

CVE-2026-12289

OESA-2026-2735

OPENSUSE-SU-2026:11052-1

OPENSUSE-SU-2026:11055-1

OPENSUSE-SU-2026:11072-1

OPENSUSE-SU-2026:21043-1

OPENSUSE-SU-2026:21168-1

RHSA-2026:27717

RHSA-2026:27733

RHSA-2026:27734

RHSA-2026:29940

RHSA-2026:30846

RHSA-2026:33445

RHSA-2026:36100

RHSA-2026:36101

RHSA-2026:36102

RHSA-2026:36103

RHSA-2026:37210

RHSA-2026:37391

RHSA-2026:38506

RHSA-2026:38750

RHSA-2026:38751

RHSA-2026:38753

RHSA-2026:39011

RHSA-2026:39141

RHSA-2026:39142

RHSA-2026:39428

RHSA-2026:39706

SUSE-SU-2026:22351-1

SUSE-SU-2026:2582-1

SUSE-SU-2026:2583-1

SUSE-SU-2026:2814-1

SUSE-SU-2026:2852-1

Produtos afetados

Firefox

Firefox Esr

Rocky Linux

Thunderbird

Referências · 251

• https://access.redhat.com/security/cve/CVE-2026-12330 · Nota
• https://suse.com/security/cve/CVE-2026-12320 · Nota
• https://bugzilla.redhat.com/2489212 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-12291 · Nota de Segurança
• https://suse.com/security/cve/CVE-2026-12319 · Nota
• https://suse.com/security/cve/CVE-2026-12298 · Nota
• https://access.redhat.com/security/cve/CVE-2026-12309 · Nota
• https://bugzilla.suse.com/1268071 · Nota
• https://ubuntu.com/security/CVE-2026-12289 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2026:29940 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-12326 · Nota
• https://access.redhat.com/errata/RHSA-2026:30846 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-8388 · Nota
• https://bugzilla.redhat.com/2489220 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2026:2583-1 · Aviso do Fabricante