CVE-2026-100803
🟡 Monitoruj
Obejście polityki same-origin w WebExtensions umożliwia nieautoryzowany dostęp do danych.
CVSS
8.1
EPSS
0.2%
Exploit
none
Vendor
Opis źródłowy (NVD)
Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
brak
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 8.1 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 0.2% |
| Opublikowano (NVD) | 2026-09-29 13:17:45 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-01 16:17:29 UTC |
Referencje
- https://bugzilla.mozilla.org/show_bug.cgi?id=2057988 ([email protected])
- https://www.mozilla.org/security/advisories/mfsa2026-100/ ([email protected])
- https://www.mozilla.org/security/advisories/mfsa2026-101/ ([email protected])
- https://www.mozilla.org/security/advisories/mfsa2026-102/ ([email protected])
- https://www.mozilla.org/security/advisories/mfsa2026-103/ ([email protected])
- https://www.mozilla.org/security/advisories/mfsa2026-97/ ([email protected])
- https://www.mozilla.org/security/advisories/mfsa2026-98/ ([email protected])
- https://www.mozilla.org/security/advisories/mfsa2026-99/ ([email protected])