PT-2026-2650 · Mozilla · Firefox

Pier Angelo Vendrame · Published 2026-01-13 · Updated 2026-01-14 · CVE-2026-0888

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 147

Description An information disclosure issue exists in the XML component.

Recommendations Update to Firefox version 147 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-06200

CVE-2026-0888

OPENSUSE-SU-2026:10046-1

Affected Products

Firefox

References · 37

• https://osv.dev/vulnerability/CVE-2026-0888 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2026-04 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-0888 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-0888 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2026-04/#CVE-2026-0888 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-0888 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2026-04 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10046-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06200 · Security Note
• https://mozilla.org/security/advisories/mfsa2026-01 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0888 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-0888 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-0888 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2026-01/#CVE-2026-0888 · Vendor Advisory