PT-2026-2649 · Mozilla+3 · Firefox Esr+4
Lyra Rebane
·
Published
2026-01-13
·
Updated
2026-03-18
·
CVE-2026-0887
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 147
Firefox ESR versions prior to 140.7
Description
A clickjacking issue exists, leading to information disclosure within the PDF Viewer component. The issue allows unauthorized access to sensitive information.
Recommendations
Update Firefox to version 147 or later.
Update Firefox ESR to version 140.7 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Firefox
Firefox Esr
Linuxmint
Rocky Linux
Ubuntu