Refine your search
818 vulnerabilities found for Firefox ESR by Mozilla
CERTFR-2026-AVI-1406
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox | Firefox versions antérieures à 159 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 153.6 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.44 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 153.6 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 159 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 159",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 153.6",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.44",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 153.6",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 159",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-117907",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117907"
},
{
"name": "CVE-2026-117889",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117889"
},
{
"name": "CVE-2026-117988",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117988"
},
{
"name": "CVE-2026-117865",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117865"
},
{
"name": "CVE-2026-117967",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117967"
},
{
"name": "CVE-2026-117914",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117914"
},
{
"name": "CVE-2026-117956",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117956"
},
{
"name": "CVE-2026-117900",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117900"
},
{
"name": "CVE-2026-117868",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117868"
},
{
"name": "CVE-2026-117960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117960"
},
{
"name": "CVE-2026-117882",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117882"
},
{
"name": "CVE-2026-117953",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117953"
},
{
"name": "CVE-2026-118179",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118179"
},
{
"name": "CVE-2026-117996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117996"
},
{
"name": "CVE-2026-117962",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117962"
},
{
"name": "CVE-2026-117948",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117948"
},
{
"name": "CVE-2026-117910",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117910"
},
{
"name": "CVE-2026-117915",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117915"
},
{
"name": "CVE-2026-117888",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117888"
},
{
"name": "CVE-2026-117935",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117935"
},
{
"name": "CVE-2026-117899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117899"
},
{
"name": "CVE-2026-118027",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118027"
},
{
"name": "CVE-2026-118026",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118026"
},
{
"name": "CVE-2026-117983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117983"
},
{
"name": "CVE-2026-117972",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117972"
},
{
"name": "CVE-2026-117920",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117920"
},
{
"name": "CVE-2026-118014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118014"
},
{
"name": "CVE-2026-117979",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117979"
},
{
"name": "CVE-2026-117871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117871"
},
{
"name": "CVE-2026-117973",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117973"
},
{
"name": "CVE-2026-118017",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118017"
},
{
"name": "CVE-2026-117878",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117878"
},
{
"name": "CVE-2026-118174",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118174"
},
{
"name": "CVE-2026-117965",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117965"
},
{
"name": "CVE-2026-117952",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117952"
},
{
"name": "CVE-2026-118005",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118005"
},
{
"name": "CVE-2026-117863",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117863"
},
{
"name": "CVE-2026-118006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118006"
},
{
"name": "CVE-2026-117969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117969"
},
{
"name": "CVE-2026-118024",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118024"
},
{
"name": "CVE-2026-117867",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117867"
},
{
"name": "CVE-2026-117997",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117997"
},
{
"name": "CVE-2026-117925",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117925"
},
{
"name": "CVE-2026-117860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117860"
},
{
"name": "CVE-2026-117864",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117864"
},
{
"name": "CVE-2026-118004",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118004"
},
{
"name": "CVE-2026-109707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109707"
},
{
"name": "CVE-2026-117934",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117934"
},
{
"name": "CVE-2026-117879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117879"
},
{
"name": "CVE-2026-117872",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117872"
},
{
"name": "CVE-2026-117869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117869"
},
{
"name": "CVE-2026-117942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117942"
},
{
"name": "CVE-2026-117957",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117957"
},
{
"name": "CVE-2026-117912",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117912"
},
{
"name": "CVE-2026-117950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117950"
},
{
"name": "CVE-2026-117990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117990"
},
{
"name": "CVE-2026-117991",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117991"
},
{
"name": "CVE-2026-109708",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109708"
},
{
"name": "CVE-2026-117924",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117924"
},
{
"name": "CVE-2026-117931",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117931"
},
{
"name": "CVE-2026-117911",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117911"
},
{
"name": "CVE-2026-118019",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118019"
},
{
"name": "CVE-2026-110247",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110247"
},
{
"name": "CVE-2026-118012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118012"
},
{
"name": "CVE-2026-117982",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117982"
},
{
"name": "CVE-2026-117909",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117909"
},
{
"name": "CVE-2026-117984",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117984"
},
{
"name": "CVE-2026-100801",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100801"
},
{
"name": "CVE-2026-117901",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117901"
},
{
"name": "CVE-2026-117897",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117897"
},
{
"name": "CVE-2026-117964",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117964"
},
{
"name": "CVE-2026-117978",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117978"
},
{
"name": "CVE-2026-117999",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117999"
},
{
"name": "CVE-2026-118008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118008"
},
{
"name": "CVE-2026-117939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117939"
},
{
"name": "CVE-2026-118007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118007"
},
{
"name": "CVE-2026-118011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118011"
},
{
"name": "CVE-2026-117946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117946"
},
{
"name": "CVE-2026-117913",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117913"
},
{
"name": "CVE-2026-118016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118016"
},
{
"name": "CVE-2026-117898",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117898"
},
{
"name": "CVE-2026-117922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117922"
},
{
"name": "CVE-2026-117977",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117977"
},
{
"name": "CVE-2026-117992",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117992"
},
{
"name": "CVE-2026-117885",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117885"
},
{
"name": "CVE-2026-117927",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117927"
},
{
"name": "CVE-2026-117976",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117976"
},
{
"name": "CVE-2026-117928",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117928"
},
{
"name": "CVE-2026-117894",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117894"
},
{
"name": "CVE-2026-117937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117937"
},
{
"name": "CVE-2026-117921",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117921"
},
{
"name": "CVE-2026-109705",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109705"
},
{
"name": "CVE-2026-117987",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117987"
},
{
"name": "CVE-2026-117874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117874"
},
{
"name": "CVE-2026-118009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118009"
},
{
"name": "CVE-2026-117974",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117974"
},
{
"name": "CVE-2026-117981",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117981"
},
{
"name": "CVE-2026-117963",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117963"
},
{
"name": "CVE-2026-117970",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117970"
},
{
"name": "CVE-2026-117884",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117884"
},
{
"name": "CVE-2026-118022",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118022"
},
{
"name": "CVE-2026-118177",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118177"
},
{
"name": "CVE-2026-117929",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117929"
},
{
"name": "CVE-2026-117985",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117985"
},
{
"name": "CVE-2026-117891",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117891"
},
{
"name": "CVE-2026-117959",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117959"
},
{
"name": "CVE-2026-117883",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117883"
},
{
"name": "CVE-2026-117892",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117892"
},
{
"name": "CVE-2026-117866",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117866"
},
{
"name": "CVE-2026-117861",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117861"
},
{
"name": "CVE-2026-117938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117938"
},
{
"name": "CVE-2026-117933",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117933"
},
{
"name": "CVE-2026-117943",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117943"
},
{
"name": "CVE-2026-117923",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117923"
},
{
"name": "CVE-2026-117954",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117954"
},
{
"name": "CVE-2026-117966",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117966"
},
{
"name": "CVE-2026-117945",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117945"
},
{
"name": "CVE-2026-118178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118178"
},
{
"name": "CVE-2026-117989",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117989"
},
{
"name": "CVE-2026-117890",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117890"
},
{
"name": "CVE-2026-118010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118010"
},
{
"name": "CVE-2026-117873",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117873"
},
{
"name": "CVE-2026-118020",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118020"
},
{
"name": "CVE-2026-117862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117862"
},
{
"name": "CVE-2026-117944",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117944"
},
{
"name": "CVE-2026-117881",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117881"
},
{
"name": "CVE-2026-118176",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118176"
},
{
"name": "CVE-2026-117896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117896"
},
{
"name": "CVE-2026-117994",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117994"
},
{
"name": "CVE-2026-117968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117968"
},
{
"name": "CVE-2026-117875",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117875"
},
{
"name": "CVE-2026-113869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113869"
},
{
"name": "CVE-2026-117876",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117876"
},
{
"name": "CVE-2026-117919",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117919"
},
{
"name": "CVE-2026-117932",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117932"
},
{
"name": "CVE-2026-117918",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117918"
},
{
"name": "CVE-2026-117940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117940"
},
{
"name": "CVE-2026-117993",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117993"
},
{
"name": "CVE-2026-117955",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117955"
},
{
"name": "CVE-2026-117887",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117887"
},
{
"name": "CVE-2026-117903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117903"
},
{
"name": "CVE-2026-118002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118002"
},
{
"name": "CVE-2026-117880",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117880"
},
{
"name": "CVE-2026-118175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118175"
},
{
"name": "CVE-2026-117904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117904"
},
{
"name": "CVE-2026-118015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118015"
},
{
"name": "CVE-2026-117975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117975"
},
{
"name": "CVE-2026-117986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117986"
},
{
"name": "CVE-2026-117895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117895"
},
{
"name": "CVE-2026-118180",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118180"
},
{
"name": "CVE-2026-117958",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117958"
},
{
"name": "CVE-2026-118003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118003"
},
{
"name": "CVE-2026-117917",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117917"
},
{
"name": "CVE-2026-117947",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117947"
},
{
"name": "CVE-2026-117906",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117906"
},
{
"name": "CVE-2026-117936",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117936"
},
{
"name": "CVE-2026-117995",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117995"
},
{
"name": "CVE-2026-118023",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118023"
},
{
"name": "CVE-2026-117908",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117908"
},
{
"name": "CVE-2026-117916",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117916"
},
{
"name": "CVE-2026-117961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117961"
},
{
"name": "CVE-2026-118000",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118000"
},
{
"name": "CVE-2026-117941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117941"
},
{
"name": "CVE-2026-118013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118013"
},
{
"name": "CVE-2026-117951",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117951"
},
{
"name": "CVE-2026-117980",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117980"
},
{
"name": "CVE-2026-117930",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117930"
},
{
"name": "CVE-2026-117926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117926"
},
{
"name": "CVE-2026-117870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117870"
},
{
"name": "CVE-2026-117998",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117998"
},
{
"name": "CVE-2026-117877",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117877"
},
{
"name": "CVE-2026-117949",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117949"
},
{
"name": "CVE-2026-117886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117886"
},
{
"name": "CVE-2026-117902",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117902"
},
{
"name": "CVE-2026-117905",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117905"
},
{
"name": "CVE-2026-117893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117893"
},
{
"name": "CVE-2026-118025",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118025"
},
{
"name": "CVE-2026-118021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118021"
},
{
"name": "CVE-2026-117971",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-117971"
},
{
"name": "CVE-2026-118018",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-118018"
}
],
"initial_release_date": "2026-10-28T00:00:00",
"last_revision_date": "2026-10-28T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1406",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-28T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-10-27",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-120",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/"
},
{
"published_at": "2026-10-27",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-121",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-121/"
},
{
"published_at": "2026-10-27",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-122",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/"
},
{
"published_at": "2026-10-27",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-119",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/"
},
{
"published_at": "2026-10-27",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-118",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/"
}
]
}
CERTFR-2026-AVI-1346
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une atteinte à la confidentialité des données et un déni de service.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Thunderbird versions antérieures à 153.5.1 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.43.1 | ||
| Mozilla | Firefox | Firefox versions antérieures à 158.0.1 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 158.0.1 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 153.5.1 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 153.5.1",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.43.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 158.0.1",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 158.0.1",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 153.5.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-113400",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113400"
},
{
"name": "CVE-2026-113470",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113470"
},
{
"name": "CVE-2026-113868",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113868"
},
{
"name": "CVE-2026-113867",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113867"
},
{
"name": "CVE-2026-113866",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113866"
},
{
"name": "CVE-2026-113401",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113401"
},
{
"name": "CVE-2026-113399",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113399"
},
{
"name": "CVE-2026-113869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113869"
}
],
"initial_release_date": "2026-10-21T00:00:00",
"last_revision_date": "2026-10-21T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1346",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-21T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un d\u00e9ni de service.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-10-20",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-115",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/"
},
{
"published_at": "2026-10-20",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-113",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-113/"
},
{
"published_at": "2026-10-20",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-114",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-114/"
},
{
"published_at": "2026-10-20",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-111",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-111/"
},
{
"published_at": "2026-10-20",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-112",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-112/"
}
]
}
CERTFR-2026-AVI-1305
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox | Firefox versions antérieures à 158 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.43 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 153.5 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 158 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 153.5 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 158",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.43",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 153.5",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 158",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 153.5",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-109779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109779"
},
{
"name": "CVE-2026-109710",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109710"
},
{
"name": "CVE-2026-109719",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109719"
},
{
"name": "CVE-2026-109735",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109735"
},
{
"name": "CVE-2026-109730",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109730"
},
{
"name": "CVE-2026-109721",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109721"
},
{
"name": "CVE-2026-109715",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109715"
},
{
"name": "CVE-2026-109727",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109727"
},
{
"name": "CVE-2026-109775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109775"
},
{
"name": "CVE-2026-109717",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109717"
},
{
"name": "CVE-2026-109761",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109761"
},
{
"name": "CVE-2026-109772",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109772"
},
{
"name": "CVE-2026-109746",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109746"
},
{
"name": "CVE-2026-109774",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109774"
},
{
"name": "CVE-2026-109723",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109723"
},
{
"name": "CVE-2026-109749",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109749"
},
{
"name": "CVE-2026-109764",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109764"
},
{
"name": "CVE-2026-109753",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109753"
},
{
"name": "CVE-2026-109751",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109751"
},
{
"name": "CVE-2026-109781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109781"
},
{
"name": "CVE-2026-109736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109736"
},
{
"name": "CVE-2026-109750",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109750"
},
{
"name": "CVE-2026-109707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109707"
},
{
"name": "CVE-2026-109706",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109706"
},
{
"name": "CVE-2026-109713",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109713"
},
{
"name": "CVE-2026-109720",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109720"
},
{
"name": "CVE-2026-109708",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109708"
},
{
"name": "CVE-2026-109728",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109728"
},
{
"name": "CVE-2026-110247",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110247"
},
{
"name": "CVE-2026-109748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109748"
},
{
"name": "CVE-2026-109732",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109732"
},
{
"name": "CVE-2026-109741",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109741"
},
{
"name": "CVE-2026-109729",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109729"
},
{
"name": "CVE-2026-109722",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109722"
},
{
"name": "CVE-2026-109783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109783"
},
{
"name": "CVE-2026-109754",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109754"
},
{
"name": "CVE-2026-109759",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109759"
},
{
"name": "CVE-2026-109773",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109773"
},
{
"name": "CVE-2026-109711",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109711"
},
{
"name": "CVE-2026-109770",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109770"
},
{
"name": "CVE-2026-109704",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109704"
},
{
"name": "CVE-2026-109724",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109724"
},
{
"name": "CVE-2026-109714",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109714"
},
{
"name": "CVE-2026-109771",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109771"
},
{
"name": "CVE-2026-109765",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109765"
},
{
"name": "CVE-2026-109726",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109726"
},
{
"name": "CVE-2026-109716",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109716"
},
{
"name": "CVE-2026-109705",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109705"
},
{
"name": "CVE-2026-109767",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109767"
},
{
"name": "CVE-2026-109734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109734"
},
{
"name": "CVE-2026-109733",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109733"
},
{
"name": "CVE-2026-109778",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109778"
},
{
"name": "CVE-2026-109782",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109782"
},
{
"name": "CVE-2026-109757",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109757"
},
{
"name": "CVE-2026-109756",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109756"
},
{
"name": "CVE-2026-109769",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109769"
},
{
"name": "CVE-2026-109709",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109709"
},
{
"name": "CVE-2026-109725",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109725"
},
{
"name": "CVE-2026-109766",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109766"
},
{
"name": "CVE-2026-109763",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109763"
},
{
"name": "CVE-2026-106016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106016"
},
{
"name": "CVE-2026-109742",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109742"
},
{
"name": "CVE-2026-109743",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109743"
},
{
"name": "CVE-2026-109740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109740"
},
{
"name": "CVE-2026-110249",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110249"
},
{
"name": "CVE-2026-109755",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109755"
},
{
"name": "CVE-2026-109780",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109780"
},
{
"name": "CVE-2026-109762",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109762"
},
{
"name": "CVE-2026-109760",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109760"
},
{
"name": "CVE-2026-109744",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109744"
},
{
"name": "CVE-2026-109747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109747"
},
{
"name": "CVE-2026-109737",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109737"
},
{
"name": "CVE-2026-109752",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109752"
},
{
"name": "CVE-2026-109776",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109776"
},
{
"name": "CVE-2026-109745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109745"
},
{
"name": "CVE-2026-109768",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109768"
},
{
"name": "CVE-2026-109712",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109712"
},
{
"name": "CVE-2026-109777",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109777"
},
{
"name": "CVE-2026-109718",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109718"
},
{
"name": "CVE-2026-109731",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109731"
},
{
"name": "CVE-2026-109739",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109739"
},
{
"name": "CVE-2026-109738",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109738"
}
],
"initial_release_date": "2026-10-14T00:00:00",
"last_revision_date": "2026-10-14T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1305",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-14T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-107",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-107/"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-106",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-109",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-110",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-110/"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-108",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/"
}
]
}
CERTFR-2026-AVI-1240
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.17 | ||
| Mozilla | Firefox | Firefox versions antérieures à 157 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.42 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 153.4 |
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.17",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 157",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.42",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 153.4",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-100786",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100786"
},
{
"name": "CVE-2026-100763",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100763"
},
{
"name": "CVE-2026-100796",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100796"
},
{
"name": "CVE-2026-100829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100829"
},
{
"name": "CVE-2026-100824",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100824"
},
{
"name": "CVE-2026-100760",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100760"
},
{
"name": "CVE-2026-100761",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100761"
},
{
"name": "CVE-2026-100780",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100780"
},
{
"name": "CVE-2026-100821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100821"
},
{
"name": "CVE-2026-100828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100828"
},
{
"name": "CVE-2026-100797",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100797"
},
{
"name": "CVE-2026-100830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100830"
},
{
"name": "CVE-2026-100814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100814"
},
{
"name": "CVE-2026-100788",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100788"
},
{
"name": "CVE-2026-100779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100779"
},
{
"name": "CVE-2026-100792",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100792"
},
{
"name": "CVE-2026-100784",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100784"
},
{
"name": "CVE-2026-100791",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100791"
},
{
"name": "CVE-2026-100812",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100812"
},
{
"name": "CVE-2026-100778",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100778"
},
{
"name": "CVE-2026-100768",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100768"
},
{
"name": "CVE-2026-100819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100819"
},
{
"name": "CVE-2026-100803",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100803"
},
{
"name": "CVE-2026-100818",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100818"
},
{
"name": "CVE-2026-100764",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100764"
},
{
"name": "CVE-2026-100816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100816"
},
{
"name": "CVE-2026-100794",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100794"
},
{
"name": "CVE-2026-100799",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100799"
},
{
"name": "CVE-2026-100787",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100787"
},
{
"name": "CVE-2026-100758",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100758"
},
{
"name": "CVE-2026-100756",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100756"
},
{
"name": "CVE-2026-100806",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100806"
},
{
"name": "CVE-2026-100771",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100771"
},
{
"name": "CVE-2026-100762",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100762"
},
{
"name": "CVE-2026-100801",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100801"
},
{
"name": "CVE-2026-100782",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100782"
},
{
"name": "CVE-2026-100757",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100757"
},
{
"name": "CVE-2026-100793",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100793"
},
{
"name": "CVE-2026-100815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100815"
},
{
"name": "CVE-2026-100822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100822"
},
{
"name": "CVE-2026-100770",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100770"
},
{
"name": "CVE-2026-100805",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100805"
},
{
"name": "CVE-2026-100804",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100804"
},
{
"name": "CVE-2026-100817",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100817"
},
{
"name": "CVE-2026-100774",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100774"
},
{
"name": "CVE-2026-100781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100781"
},
{
"name": "CVE-2026-96869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-96869"
},
{
"name": "CVE-2026-92035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92035"
},
{
"name": "CVE-2026-100820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100820"
},
{
"name": "CVE-2026-100772",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100772"
},
{
"name": "CVE-2026-100813",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100813"
},
{
"name": "CVE-2026-100775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100775"
},
{
"name": "CVE-2026-100789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100789"
},
{
"name": "CVE-2026-100826",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100826"
},
{
"name": "CVE-2026-100783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100783"
},
{
"name": "CVE-2026-100798",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100798"
},
{
"name": "CVE-2026-100773",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100773"
},
{
"name": "CVE-2026-100809",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100809"
},
{
"name": "CVE-2026-100807",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100807"
},
{
"name": "CVE-2026-100776",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100776"
},
{
"name": "CVE-2026-100832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100832"
},
{
"name": "CVE-2026-100800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100800"
},
{
"name": "CVE-2026-100810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100810"
},
{
"name": "CVE-2026-100825",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100825"
},
{
"name": "CVE-2026-100766",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100766"
},
{
"name": "CVE-2026-100802",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100802"
},
{
"name": "CVE-2026-100831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100831"
},
{
"name": "CVE-2026-100759",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100759"
},
{
"name": "CVE-2026-100823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100823"
},
{
"name": "CVE-2026-100777",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100777"
},
{
"name": "CVE-2026-100790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100790"
},
{
"name": "CVE-2026-100767",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100767"
},
{
"name": "CVE-2026-100808",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100808"
},
{
"name": "CVE-2026-100785",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100785"
},
{
"name": "CVE-2026-100795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100795"
},
{
"name": "CVE-2026-100811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100811"
},
{
"name": "CVE-2026-100765",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100765"
},
{
"name": "CVE-2026-100769",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100769"
}
],
"initial_release_date": "2026-09-30T00:00:00",
"last_revision_date": "2026-09-30T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1240",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-30T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-09-29",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-100",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/"
},
{
"published_at": "2026-09-29",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-98",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-98/"
},
{
"published_at": "2026-09-29",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-97",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/"
},
{
"published_at": "2026-09-29",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-99",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-99/"
}
]
}
CERTFR-2026-AVI-1183
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.16 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 156 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.41 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 140.16 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 153.3 | ||
| Mozilla | Firefox | Firefox versions antérieures à 156 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 153.3 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.16",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 156",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.41",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 140.16",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 153.3",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 156",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 153.3",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-92055",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92055"
},
{
"name": "CVE-2026-92027",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92027"
},
{
"name": "CVE-2026-92012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92012"
},
{
"name": "CVE-2026-92070",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92070"
},
{
"name": "CVE-2026-92024",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92024"
},
{
"name": "CVE-2026-92065",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92065"
},
{
"name": "CVE-2026-92240",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92240"
},
{
"name": "CVE-2026-92010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92010"
},
{
"name": "CVE-2026-92042",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92042"
},
{
"name": "CVE-2026-92073",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92073"
},
{
"name": "CVE-2026-92068",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92068"
},
{
"name": "CVE-2026-92030",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92030"
},
{
"name": "CVE-2026-92014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92014"
},
{
"name": "CVE-2026-92026",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92026"
},
{
"name": "CVE-2026-92039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92039"
},
{
"name": "CVE-2026-92008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92008"
},
{
"name": "CVE-2026-92041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92041"
},
{
"name": "CVE-2026-92006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92006"
},
{
"name": "CVE-2026-92033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92033"
},
{
"name": "CVE-2026-92067",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92067"
},
{
"name": "CVE-2026-92046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92046"
},
{
"name": "CVE-2026-92053",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92053"
},
{
"name": "CVE-2026-92072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92072"
},
{
"name": "CVE-2026-92063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92063"
},
{
"name": "CVE-2026-92037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92037"
},
{
"name": "CVE-2026-92031",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92031"
},
{
"name": "CVE-2026-92016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92016"
},
{
"name": "CVE-2026-92050",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92050"
},
{
"name": "CVE-2026-92075",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92075"
},
{
"name": "CVE-2026-92049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92049"
},
{
"name": "CVE-2026-92032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92032"
},
{
"name": "CVE-2026-92020",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92020"
},
{
"name": "CVE-2026-92019",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92019"
},
{
"name": "CVE-2026-92077",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92077"
},
{
"name": "CVE-2026-92078",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92078"
},
{
"name": "CVE-2026-92057",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92057"
},
{
"name": "CVE-2026-92076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92076"
},
{
"name": "CVE-2026-92013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92013"
},
{
"name": "CVE-2026-92009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92009"
},
{
"name": "CVE-2026-92035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92035"
},
{
"name": "CVE-2026-92005",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92005"
},
{
"name": "CVE-2026-92028",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92028"
},
{
"name": "CVE-2026-92052",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92052"
},
{
"name": "CVE-2026-92069",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92069"
},
{
"name": "CVE-2026-92061",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92061"
},
{
"name": "CVE-2026-92071",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92071"
},
{
"name": "CVE-2026-92038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92038"
},
{
"name": "CVE-2026-92045",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92045"
},
{
"name": "CVE-2026-92064",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92064"
},
{
"name": "CVE-2026-92058",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92058"
},
{
"name": "CVE-2026-92238",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92238"
},
{
"name": "CVE-2026-92021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92021"
},
{
"name": "CVE-2026-92047",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92047"
},
{
"name": "CVE-2026-92044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92044"
},
{
"name": "CVE-2026-92036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92036"
},
{
"name": "CVE-2026-92074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92074"
},
{
"name": "CVE-2026-92059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92059"
},
{
"name": "CVE-2026-92062",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92062"
},
{
"name": "CVE-2026-92079",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92079"
},
{
"name": "CVE-2026-92022",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92022"
},
{
"name": "CVE-2026-92054",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92054"
},
{
"name": "CVE-2026-92018",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92018"
},
{
"name": "CVE-2026-92056",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92056"
},
{
"name": "CVE-2026-92051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92051"
},
{
"name": "CVE-2026-92034",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92034"
},
{
"name": "CVE-2026-92029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92029"
},
{
"name": "CVE-2026-92011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92011"
},
{
"name": "CVE-2026-92017",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92017"
},
{
"name": "CVE-2026-92239",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92239"
},
{
"name": "CVE-2026-92040",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92040"
},
{
"name": "CVE-2026-92023",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92023"
},
{
"name": "CVE-2026-92007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92007"
},
{
"name": "CVE-2026-92025",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92025"
},
{
"name": "CVE-2026-92048",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92048"
},
{
"name": "CVE-2026-92015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92015"
},
{
"name": "CVE-2026-92066",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92066"
},
{
"name": "CVE-2026-92060",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92060"
},
{
"name": "CVE-2026-92043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92043"
}
],
"initial_release_date": "2026-09-16T00:00:00",
"last_revision_date": "2026-09-17T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1183",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-16T00:00:00.000000"
},
{
"description": "Ajout du bulletin de s\u00e9curit\u00e9 mfsa2026-96 du 16 septembre 2026.",
"revision_date": "2026-09-17T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-09-15",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-90",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/"
},
{
"published_at": "2026-09-15",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-91",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-91/"
},
{
"published_at": "2026-09-16",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-96",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-96/"
},
{
"published_at": "2026-09-15",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-95",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-95/"
},
{
"published_at": "2026-09-15",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-94",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-94/"
},
{
"published_at": "2026-09-15",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-93",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-93/"
},
{
"published_at": "2026-09-15",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-92",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-92/"
}
]
}
CERTFR-2026-AVI-1106
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.40 | ||
| Mozilla | Firefox | Firefox versions antérieures à 155 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 153.2 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.15 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 153.2 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 140.15 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 155 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.40",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 155",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 153.2",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.15",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 153.2",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 140.15",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 155",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-84137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84137"
},
{
"name": "CVE-2026-84637",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84637"
},
{
"name": "CVE-2026-84640",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84640"
},
{
"name": "CVE-2026-84138",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84138"
},
{
"name": "CVE-2026-84126",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84126"
},
{
"name": "CVE-2026-84135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84135"
},
{
"name": "CVE-2026-84117",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84117"
},
{
"name": "CVE-2026-84140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84140"
},
{
"name": "CVE-2026-84134",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84134"
},
{
"name": "CVE-2026-84122",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84122"
},
{
"name": "CVE-2026-84642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84642"
},
{
"name": "CVE-2026-84121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84121"
},
{
"name": "CVE-2026-84123",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84123"
},
{
"name": "CVE-2026-16365",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16365"
},
{
"name": "CVE-2026-16371",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16371"
},
{
"name": "CVE-2026-84144",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84144"
},
{
"name": "CVE-2026-84641",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84641"
},
{
"name": "CVE-2026-84119",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84119"
},
{
"name": "CVE-2026-84639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84639"
},
{
"name": "CVE-2026-84132",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84132"
},
{
"name": "CVE-2026-74952",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74952"
},
{
"name": "CVE-2026-84124",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84124"
},
{
"name": "CVE-2026-84145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84145"
},
{
"name": "CVE-2026-84136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84136"
},
{
"name": "CVE-2026-84131",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84131"
},
{
"name": "CVE-2026-75874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75874"
},
{
"name": "CVE-2026-84133",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84133"
},
{
"name": "CVE-2026-84129",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84129"
},
{
"name": "CVE-2026-84127",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84127"
},
{
"name": "CVE-2026-84141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84141"
},
{
"name": "CVE-2026-84125",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84125"
},
{
"name": "CVE-2026-84120",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84120"
},
{
"name": "CVE-2026-84139",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84139"
},
{
"name": "CVE-2026-84142",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84142"
},
{
"name": "CVE-2026-84118",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84118"
},
{
"name": "CVE-2026-84143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84143"
},
{
"name": "CVE-2026-84130",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84130"
},
{
"name": "CVE-2026-84128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84128"
}
],
"initial_release_date": "2026-09-02T00:00:00",
"last_revision_date": "2026-09-02T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1106",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-02T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-09-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-83",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-83/"
},
{
"published_at": "2026-09-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-87",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/"
},
{
"published_at": "2026-09-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-85",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-85/"
},
{
"published_at": "2026-09-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-84",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-84/"
},
{
"published_at": "2026-09-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-88",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-88/"
},
{
"published_at": "2026-09-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-82",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-82/"
},
{
"published_at": "2026-09-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-86",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-86/"
}
]
}
CERTFR-2026-AVI-1054
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Thunderbird versions antérieures à 154 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.39 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 153.1 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 140.14 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.14 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 153.1 | ||
| Mozilla | Firefox | Firefox versions antérieures à 154 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 154",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.39",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 153.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 140.14",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.14",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 153.1",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 154",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-74973",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74973"
},
{
"name": "CVE-2026-74966",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74966"
},
{
"name": "CVE-2026-74944",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74944"
},
{
"name": "CVE-2026-74936",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74936"
},
{
"name": "CVE-2026-74989",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74989"
},
{
"name": "CVE-2026-74948",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74948"
},
{
"name": "CVE-2026-74963",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74963"
},
{
"name": "CVE-2026-74975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74975"
},
{
"name": "CVE-2026-74946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74946"
},
{
"name": "CVE-2026-74947",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74947"
},
{
"name": "CVE-2026-74951",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74951"
},
{
"name": "CVE-2026-74974",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74974"
},
{
"name": "CVE-2026-74937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74937"
},
{
"name": "CVE-2026-74967",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74967"
},
{
"name": "CVE-2026-74978",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74978"
},
{
"name": "CVE-2026-74955",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74955"
},
{
"name": "CVE-2026-74990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74990"
},
{
"name": "CVE-2026-74972",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74972"
},
{
"name": "CVE-2026-74980",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74980"
},
{
"name": "CVE-2026-74956",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74956"
},
{
"name": "CVE-2026-74958",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74958"
},
{
"name": "CVE-2026-74969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74969"
},
{
"name": "CVE-2026-74953",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74953"
},
{
"name": "CVE-2026-74945",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74945"
},
{
"name": "CVE-2026-74950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74950"
},
{
"name": "CVE-2026-74968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74968"
},
{
"name": "CVE-2026-74965",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74965"
},
{
"name": "CVE-2026-74986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74986"
},
{
"name": "CVE-2026-74970",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74970"
},
{
"name": "CVE-2026-74959",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74959"
},
{
"name": "CVE-2026-74949",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74949"
},
{
"name": "CVE-2026-74940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74940"
},
{
"name": "CVE-2026-74984",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74984"
},
{
"name": "CVE-2026-74943",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74943"
},
{
"name": "CVE-2026-74979",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74979"
},
{
"name": "CVE-2026-74988",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74988"
},
{
"name": "CVE-2026-74954",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74954"
},
{
"name": "CVE-2026-74960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74960"
},
{
"name": "CVE-2026-74964",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74964"
},
{
"name": "CVE-2026-74957",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74957"
},
{
"name": "CVE-2026-74985",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74985"
},
{
"name": "CVE-2026-74939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74939"
},
{
"name": "CVE-2026-74952",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74952"
},
{
"name": "CVE-2026-74961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74961"
},
{
"name": "CVE-2026-74971",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74971"
},
{
"name": "CVE-2026-74941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74941"
},
{
"name": "CVE-2026-74976",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74976"
},
{
"name": "CVE-2026-74935",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74935"
},
{
"name": "CVE-2026-74987",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74987"
},
{
"name": "CVE-2026-75874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75874"
},
{
"name": "CVE-2026-74982",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74982"
},
{
"name": "CVE-2026-74981",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74981"
},
{
"name": "CVE-2026-74977",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74977"
},
{
"name": "CVE-2026-74934",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74934"
},
{
"name": "CVE-2026-74938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74938"
},
{
"name": "CVE-2026-74962",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74962"
},
{
"name": "CVE-2026-74942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74942"
},
{
"name": "CVE-2026-74983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74983"
}
],
"initial_release_date": "2026-08-19T00:00:00",
"last_revision_date": "2026-08-19T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1054",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-80",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-80/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-75",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-75/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-74",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-76",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-76/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-77",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-77/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-79",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-79/"
},
{
"published_at": "2026-08-18",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-78",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-78/"
}
]
}
CERTFR-2026-AVI-0910
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.38 | ||
| Mozilla | Firefox | Firefox versions antérieures à 153 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.13 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.38",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 153",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.13",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-16354",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16354"
},
{
"name": "CVE-2026-16359",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16359"
},
{
"name": "CVE-2026-15719",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15719"
},
{
"name": "CVE-2026-16409",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16409"
},
{
"name": "CVE-2026-16404",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16404"
},
{
"name": "CVE-2026-16373",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16373"
},
{
"name": "CVE-2026-16386",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16386"
},
{
"name": "CVE-2026-16377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16377"
},
{
"name": "CVE-2026-16357",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16357"
},
{
"name": "CVE-2026-16387",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16387"
},
{
"name": "CVE-2026-16352",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16352"
},
{
"name": "CVE-2026-16406",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16406"
},
{
"name": "CVE-2026-16363",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16363"
},
{
"name": "CVE-2026-16383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16383"
},
{
"name": "CVE-2026-16393",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16393"
},
{
"name": "CVE-2026-16401",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16401"
},
{
"name": "CVE-2026-16378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16378"
},
{
"name": "CVE-2026-16350",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16350"
},
{
"name": "CVE-2026-16369",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16369"
},
{
"name": "CVE-2026-16388",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16388"
},
{
"name": "CVE-2026-16402",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16402"
},
{
"name": "CVE-2026-16370",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16370"
},
{
"name": "CVE-2026-16362",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16362"
},
{
"name": "CVE-2026-16405",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16405"
},
{
"name": "CVE-2026-16407",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16407"
},
{
"name": "CVE-2026-16391",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16391"
},
{
"name": "CVE-2026-16364",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16364"
},
{
"name": "CVE-2026-16384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16384"
},
{
"name": "CVE-2026-16400",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16400"
},
{
"name": "CVE-2026-16361",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16361"
},
{
"name": "CVE-2026-16396",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16396"
},
{
"name": "CVE-2026-16381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16381"
},
{
"name": "CVE-2026-16394",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16394"
},
{
"name": "CVE-2026-16365",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16365"
},
{
"name": "CVE-2026-16376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16376"
},
{
"name": "CVE-2026-16351",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16351"
},
{
"name": "CVE-2026-16371",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16371"
},
{
"name": "CVE-2026-16412",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16412"
},
{
"name": "CVE-2026-16398",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16398"
},
{
"name": "CVE-2026-16367",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16367"
},
{
"name": "CVE-2026-16389",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16389"
},
{
"name": "CVE-2026-16399",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16399"
},
{
"name": "CVE-2026-16375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16375"
},
{
"name": "CVE-2026-16408",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16408"
},
{
"name": "CVE-2026-15718",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15718"
},
{
"name": "CVE-2026-16385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16385"
},
{
"name": "CVE-2026-16382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16382"
},
{
"name": "CVE-2026-16410",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16410"
},
{
"name": "CVE-2026-16374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16374"
},
{
"name": "CVE-2026-16379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16379"
},
{
"name": "CVE-2026-16353",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16353"
},
{
"name": "CVE-2026-16397",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16397"
},
{
"name": "CVE-2026-16380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16380"
},
{
"name": "CVE-2026-16349",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16349"
},
{
"name": "CVE-2026-16366",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16366"
},
{
"name": "CVE-2026-16390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16390"
},
{
"name": "CVE-2026-16356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16356"
},
{
"name": "CVE-2026-16358",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16358"
},
{
"name": "CVE-2026-16403",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16403"
},
{
"name": "CVE-2026-16360",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16360"
},
{
"name": "CVE-2026-16355",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16355"
},
{
"name": "CVE-2026-16392",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16392"
},
{
"name": "CVE-2026-16368",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16368"
},
{
"name": "CVE-2026-16372",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16372"
},
{
"name": "CVE-2026-16395",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16395"
},
{
"name": "CVE-2026-16411",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16411"
}
],
"initial_release_date": "2026-07-22T00:00:00",
"last_revision_date": "2026-07-22T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0910",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-22T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-70",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-69",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-69/"
},
{
"published_at": "2026-07-21",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-68",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/"
}
]
}
CERTFR-2026-AVI-0615
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Thunderbird versions antérieures à 151 | ||
| Mozilla | Firefox | Firefox versions antérieures à 151 | ||
| Mozilla | Firefox | Firefox pour iOS versions antérieures à 151.0 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 140.11 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.36 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.11 |
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 151",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 151",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox pour iOS versions ant\u00e9rieures \u00e0 151.0",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 140.11",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.36",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.11",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-8975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8975"
},
{
"name": "CVE-2026-8961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8961"
},
{
"name": "CVE-2026-8946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8946"
},
{
"name": "CVE-2026-8948",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8948"
},
{
"name": "CVE-2026-8945",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8945"
},
{
"name": "CVE-2026-8958",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8958"
},
{
"name": "CVE-2026-8974",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8974"
},
{
"name": "CVE-2026-8964",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8964"
},
{
"name": "CVE-2026-8973",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8973"
},
{
"name": "CVE-2026-8954",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8954"
},
{
"name": "CVE-2026-8957",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8957"
},
{
"name": "CVE-2026-8951",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8951"
},
{
"name": "CVE-2026-8952",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8952"
},
{
"name": "CVE-2026-8706",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8706"
},
{
"name": "CVE-2026-8956",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8956"
},
{
"name": "CVE-2026-8967",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8967"
},
{
"name": "CVE-2026-8971",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8971"
},
{
"name": "CVE-2026-8953",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8953"
},
{
"name": "CVE-2026-8970",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8970"
},
{
"name": "CVE-2026-8965",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8965"
},
{
"name": "CVE-2026-8949",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8949"
},
{
"name": "CVE-2026-8972",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8972"
},
{
"name": "CVE-2026-8969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8969"
},
{
"name": "CVE-2026-8401",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8401"
},
{
"name": "CVE-2026-8391",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8391"
},
{
"name": "CVE-2026-8962",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8962"
},
{
"name": "CVE-2026-8963",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8963"
},
{
"name": "CVE-2026-8388",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8388"
},
{
"name": "CVE-2026-8968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8968"
},
{
"name": "CVE-2026-8966",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8966"
},
{
"name": "CVE-2026-8960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8960"
},
{
"name": "CVE-2026-8950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8950"
},
{
"name": "CVE-2026-8959",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8959"
},
{
"name": "CVE-2026-8947",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8947"
},
{
"name": "CVE-2026-8955",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8955"
}
],
"initial_release_date": "2026-05-20T00:00:00",
"last_revision_date": "2026-05-20T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0615",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-05-20T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-05-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-47",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-47/"
},
{
"published_at": "2026-05-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-46",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-46/"
},
{
"published_at": "2026-05-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-50",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-50/"
},
{
"published_at": "2026-05-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-48",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-48/"
},
{
"published_at": "2026-05-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-49",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-49/"
},
{
"published_at": "2026-05-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-51",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-51/"
}
]
}
CERTFR-2026-AVI-0555
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Elles permettent à un attaquant de provoquer une exécution de code arbitraire et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Thunderbird versions antérieures à 150.0.2 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 140.10.2 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.35.2 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.10.2 | ||
| Mozilla | Firefox | Firefox versions antérieures à 150.0.2 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 140.10.2 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 150.0.2",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 140.10.2",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.35.2",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.10.2",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 150.0.2",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 140.10.2",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-8092",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8092"
},
{
"name": "CVE-2026-8094",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8094"
},
{
"name": "CVE-2026-8091",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8091"
},
{
"name": "CVE-2026-8090",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8090"
},
{
"name": "CVE-2026-8093",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8093"
}
],
"initial_release_date": "2026-05-11T00:00:00",
"last_revision_date": "2026-05-11T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0555",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-05-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-05-08",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-43",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-43/"
},
{
"published_at": "2026-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-42",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-42/"
},
{
"published_at": "2026-05-08",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-44",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-44/"
},
{
"published_at": "2026-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-40",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-40/"
},
{
"published_at": "2026-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-41",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-41/"
}
]
}
CERTFR-2026-AVI-0507
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.35.1 | ||
| Mozilla | Firefox | Firefox versions antérieures à 150.0.1 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.10.1 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.35.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 150.0.1",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.10.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-7324",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7324"
},
{
"name": "CVE-2026-7323",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7323"
},
{
"name": "CVE-2026-7322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7322"
},
{
"name": "CVE-2026-7320",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7320"
},
{
"name": "CVE-2026-7321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7321"
}
],
"initial_release_date": "2026-04-29T00:00:00",
"last_revision_date": "2026-04-29T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0507",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-04-29T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, un contournement de la politique de s\u00e9curit\u00e9 et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-04-28",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-37",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-37/"
},
{
"published_at": "2026-04-28",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-35",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-35/"
},
{
"published_at": "2026-04-28",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-36",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-36/"
}
]
}
CERTFR-2026-AVI-0480
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.10 | ||
| Mozilla | Firefox | Firefox versions antérieures à 150 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.35 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 150 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 140.10 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.10",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 150",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.35",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 150",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 140.10",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-6772",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6772"
},
{
"name": "CVE-2026-6747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6747"
},
{
"name": "CVE-2026-6782",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6782"
},
{
"name": "CVE-2026-6786",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6786"
},
{
"name": "CVE-2026-6750",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6750"
},
{
"name": "CVE-2026-6757",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6757"
},
{
"name": "CVE-2026-6768",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6768"
},
{
"name": "CVE-2026-6746",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6746"
},
{
"name": "CVE-2026-6761",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6761"
},
{
"name": "CVE-2026-6762",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6762"
},
{
"name": "CVE-2026-6769",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6769"
},
{
"name": "CVE-2026-6751",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6751"
},
{
"name": "CVE-2026-6780",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6780"
},
{
"name": "CVE-2026-6765",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6765"
},
{
"name": "CVE-2026-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2781"
},
{
"name": "CVE-2026-6773",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6773"
},
{
"name": "CVE-2026-6754",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6754"
},
{
"name": "CVE-2026-6781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6781"
},
{
"name": "CVE-2026-6756",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6756"
},
{
"name": "CVE-2026-6758",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6758"
},
{
"name": "CVE-2026-6785",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6785"
},
{
"name": "CVE-2026-6783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6783"
},
{
"name": "CVE-2026-6760",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6760"
},
{
"name": "CVE-2026-6759",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6759"
},
{
"name": "CVE-2026-6774",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6774"
},
{
"name": "CVE-2026-6779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6779"
},
{
"name": "CVE-2026-6777",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6777"
},
{
"name": "CVE-2026-6748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6748"
},
{
"name": "CVE-2026-6778",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6778"
},
{
"name": "CVE-2026-6752",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6752"
},
{
"name": "CVE-2026-6767",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6767"
},
{
"name": "CVE-2026-6775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6775"
},
{
"name": "CVE-2026-6749",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6749"
},
{
"name": "CVE-2026-6771",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6771"
},
{
"name": "CVE-2026-6753",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6753"
},
{
"name": "CVE-2026-6764",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6764"
},
{
"name": "CVE-2026-6763",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6763"
},
{
"name": "CVE-2026-6776",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6776"
},
{
"name": "CVE-2026-6766",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6766"
},
{
"name": "CVE-2026-6770",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6770"
},
{
"name": "CVE-2026-6784",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6784"
},
{
"name": "CVE-2026-6755",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6755"
}
],
"initial_release_date": "2026-04-22T00:00:00",
"last_revision_date": "2026-04-22T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0480",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-04-22T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-04-21",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-32",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-32/"
},
{
"published_at": "2026-04-21",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-34",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-34/"
},
{
"published_at": "2026-04-21",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-33",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-33/"
},
{
"published_at": "2026-04-21",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-31",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-31/"
},
{
"published_at": "2026-04-21",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-30",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-30/"
}
]
}
CERTFR-2026-AVI-0404
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.9.1 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 140.9.1 | ||
| Mozilla | Firefox | Firefox versions antérieures à 149.0.2 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 149.0.2 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.34.1 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.9.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 140.9.1",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 149.0.2",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 149.0.2",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.34.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-5731",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5731"
},
{
"name": "CVE-2026-5733",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5733"
},
{
"name": "CVE-2026-5732",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5732"
},
{
"name": "CVE-2026-5734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5734"
},
{
"name": "CVE-2026-5735",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5735"
}
],
"initial_release_date": "2026-04-08T00:00:00",
"last_revision_date": "2026-04-08T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0404",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-04-08T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-04-07",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-26",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-26/"
},
{
"published_at": "2026-04-07",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-28",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-28/"
},
{
"published_at": "2026-04-07",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-25",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-25/"
},
{
"published_at": "2026-04-07",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-29",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-29/"
},
{
"published_at": "2026-04-07",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-27",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-27/"
}
]
}
CERTFR-2026-AVI-0354
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox | Firefox versions antérieures à 149 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 140.9 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 149 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.9 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.34 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 149",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 140.9",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 149",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.9",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.34",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-4684",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4684"
},
{
"name": "CVE-2026-4721",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4721"
},
{
"name": "CVE-2026-4725",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4725"
},
{
"name": "CVE-2026-4728",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4728"
},
{
"name": "CVE-2026-4720",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4720"
},
{
"name": "CVE-2026-4710",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4710"
},
{
"name": "CVE-2026-4694",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4694"
},
{
"name": "CVE-2026-4698",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4698"
},
{
"name": "CVE-2026-4690",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4690"
},
{
"name": "CVE-2026-4697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4697"
},
{
"name": "CVE-2026-4689",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4689"
},
{
"name": "CVE-2026-4711",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4711"
},
{
"name": "CVE-2026-4706",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4706"
},
{
"name": "CVE-2026-4715",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4715"
},
{
"name": "CVE-2026-4729",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4729"
},
{
"name": "CVE-2026-4696",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4696"
},
{
"name": "CVE-2026-4726",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4726"
},
{
"name": "CVE-2026-4687",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4687"
},
{
"name": "CVE-2026-4709",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4709"
},
{
"name": "CVE-2025-59375",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59375"
},
{
"name": "CVE-2026-4714",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4714"
},
{
"name": "CVE-2026-4699",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4699"
},
{
"name": "CVE-2026-4695",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4695"
},
{
"name": "CVE-2026-4693",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4693"
},
{
"name": "CVE-2026-3889",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3889"
},
{
"name": "CVE-2026-4692",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4692"
},
{
"name": "CVE-2026-4701",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4701"
},
{
"name": "CVE-2026-4724",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4724"
},
{
"name": "CVE-2026-4705",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4705"
},
{
"name": "CVE-2026-4717",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4717"
},
{
"name": "CVE-2026-4700",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4700"
},
{
"name": "CVE-2026-4723",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4723"
},
{
"name": "CVE-2026-4688",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4688"
},
{
"name": "CVE-2026-4712",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4712"
},
{
"name": "CVE-2026-4707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4707"
},
{
"name": "CVE-2026-4716",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4716"
},
{
"name": "CVE-2026-4704",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4704"
},
{
"name": "CVE-2026-4727",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4727"
},
{
"name": "CVE-2026-4722",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4722"
},
{
"name": "CVE-2026-4713",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4713"
},
{
"name": "CVE-2026-4718",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4718"
},
{
"name": "CVE-2026-4685",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4685"
},
{
"name": "CVE-2026-4702",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4702"
},
{
"name": "CVE-2026-4719",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4719"
},
{
"name": "CVE-2026-4708",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4708"
},
{
"name": "CVE-2026-4371",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4371"
},
{
"name": "CVE-2026-4691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4691"
},
{
"name": "CVE-2026-4686",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4686"
}
],
"initial_release_date": "2026-03-25T00:00:00",
"last_revision_date": "2026-03-25T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0354",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-03-25T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-03-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-20",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/"
},
{
"published_at": "2026-03-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-24",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-24/"
},
{
"published_at": "2026-03-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-23",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-23/"
},
{
"published_at": "2026-03-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-22",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-22/"
},
{
"published_at": "2026-03-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-21",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-21/"
}
]
}
CERTFR-2026-AVI-0204
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox | Firefox pour iOS versions antérieures à 147.4 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 140.8 | ||
| Mozilla | Firefox | Firefox versions antérieures à 148 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.33 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 148 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.8 |
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox pour iOS versions ant\u00e9rieures \u00e0 147.4",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 140.8",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 148",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.33",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 148",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.8",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-2777",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2777"
},
{
"name": "CVE-2026-2773",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2773"
},
{
"name": "CVE-2026-2763",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2763"
},
{
"name": "CVE-2026-2783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2783"
},
{
"name": "CVE-2026-2786",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2786"
},
{
"name": "CVE-2026-2778",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2778"
},
{
"name": "CVE-2026-2788",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2788"
},
{
"name": "CVE-2026-2758",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2758"
},
{
"name": "CVE-2026-2779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2779"
},
{
"name": "CVE-2026-2771",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2771"
},
{
"name": "CVE-2026-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2769"
},
{
"name": "CVE-2026-2799",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2799"
},
{
"name": "CVE-2026-2775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2775"
},
{
"name": "CVE-2026-2790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2790"
},
{
"name": "CVE-2026-2784",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2784"
},
{
"name": "CVE-2026-2806",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2806"
},
{
"name": "CVE-2026-2760",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2760"
},
{
"name": "CVE-2026-2792",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2792"
},
{
"name": "CVE-2026-2807",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2807"
},
{
"name": "CVE-2026-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2781"
},
{
"name": "CVE-2026-2759",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2759"
},
{
"name": "CVE-2026-2776",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2776"
},
{
"name": "CVE-2026-2764",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2764"
},
{
"name": "CVE-2026-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2762"
},
{
"name": "CVE-2026-2791",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2791"
},
{
"name": "CVE-2026-2797",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2797"
},
{
"name": "CVE-2026-2794",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2794"
},
{
"name": "CVE-2026-2765",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2765"
},
{
"name": "CVE-2026-2770",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2770"
},
{
"name": "CVE-2026-2768",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2768"
},
{
"name": "CVE-2026-2802",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2802"
},
{
"name": "CVE-2026-2789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2789"
},
{
"name": "CVE-2026-2787",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2787"
},
{
"name": "CVE-2026-2772",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2772"
},
{
"name": "CVE-2026-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2798"
},
{
"name": "CVE-2026-2803",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2803"
},
{
"name": "CVE-2026-2805",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2805"
},
{
"name": "CVE-2026-2780",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2780"
},
{
"name": "CVE-2026-2782",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2782"
},
{
"name": "CVE-2026-2766",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2766"
},
{
"name": "CVE-2026-2796",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2796"
},
{
"name": "CVE-2026-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2800"
},
{
"name": "CVE-2026-2774",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2774"
},
{
"name": "CVE-2026-2801",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2801"
},
{
"name": "CVE-2026-2785",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2785"
},
{
"name": "CVE-2026-2634",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2634"
},
{
"name": "CVE-2026-2757",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2757"
},
{
"name": "CVE-2026-2761",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2761"
},
{
"name": "CVE-2026-2793",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2793"
},
{
"name": "CVE-2026-2804",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2804"
},
{
"name": "CVE-2026-2795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2795"
},
{
"name": "CVE-2026-2767",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2767"
}
],
"initial_release_date": "2026-02-25T00:00:00",
"last_revision_date": "2026-02-25T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0204",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-02-25T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-02-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-14",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-14/"
},
{
"published_at": "2026-02-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-15",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-15/"
},
{
"published_at": "2026-02-20",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-12",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-12/"
},
{
"published_at": "2026-02-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-13",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-13/"
},
{
"published_at": "2026-02-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-17",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-17/"
},
{
"published_at": "2026-02-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-16",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-16/"
}
]
}
CERTFR-2026-AVI-0175
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Elles permettent à un attaquant de provoquer un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox | Firefox pour iOS versions antérieures à 147.2.1 | ||
| Mozilla | Thunderbird | Thunderbird versions 147.x antérieures à 147.0.2 | ||
| Mozilla | Firefox ESR | Firefox ESR versions 115.x antérieures à 115.32.1 | ||
| Mozilla | Firefox | Firefox versions antérieures à 147.0.4 | ||
| Mozilla | Thunderbird | Thunderbird versions 140.x antérieures à 140.7.2 | ||
| Mozilla | Firefox ESR | Firefox ESR versions 140.x antérieures à 140.7.1 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox pour iOS versions ant\u00e9rieures \u00e0 147.2.1",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions 147.x ant\u00e9rieures \u00e0 147.0.2",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions 115.x ant\u00e9rieures \u00e0 115.32.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": " Firefox versions ant\u00e9rieures \u00e0 147.0.4",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions 140.x ant\u00e9rieures \u00e0 140.7.2",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions 140.x ant\u00e9rieures \u00e0 140.7.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-2032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2032"
},
{
"name": "CVE-2026-2447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2447"
}
],
"initial_release_date": "2026-02-17T00:00:00",
"last_revision_date": "2026-02-17T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0175",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-02-17T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Elles permettent \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9 et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-02-09",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-09",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-09/"
},
{
"published_at": "2026-02-16",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-11",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-11/"
},
{
"published_at": "2026-02-16",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-10",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-10/"
}
]
}
CERTFR-2026-AVI-0051
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Thunderbird versions antérieures à 140.7 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.7 | ||
| Mozilla | Firefox | Firefox versions antérieures à 147 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 147 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 140.7",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.7",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 147",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 147",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-0885",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0885"
},
{
"name": "CVE-2026-0887",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0887"
},
{
"name": "CVE-2025-14327",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14327"
},
{
"name": "CVE-2026-0879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0879"
},
{
"name": "CVE-2026-0892",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0892"
},
{
"name": "CVE-2026-0877",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0877"
},
{
"name": "CVE-2026-0878",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0878"
},
{
"name": "CVE-2026-0883",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0883"
},
{
"name": "CVE-2026-0880",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0880"
},
{
"name": "CVE-2026-0881",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0881"
},
{
"name": "CVE-2026-0882",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0882"
},
{
"name": "CVE-2026-0884",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0884"
},
{
"name": "CVE-2026-0889",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0889"
},
{
"name": "CVE-2026-0888",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0888"
},
{
"name": "CVE-2026-0886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0886"
},
{
"name": "CVE-2026-0890",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0890"
},
{
"name": "CVE-2026-0891",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0891"
}
],
"initial_release_date": "2026-01-15T00:00:00",
"last_revision_date": "2026-01-15T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0051",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-01-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-01-13",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-05",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-05/"
},
{
"published_at": "2026-01-13",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-04",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-04/"
}
]
}
CERTFR-2026-AVI-0038
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.32 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.7 | ||
| Mozilla | Firefox | Firefox versions antérieures à 147 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 147 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.32",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.7",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 147",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 147",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-0885",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0885"
},
{
"name": "CVE-2026-0887",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0887"
},
{
"name": "CVE-2025-14327",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14327"
},
{
"name": "CVE-2026-0879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0879"
},
{
"name": "CVE-2026-0892",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0892"
},
{
"name": "CVE-2026-0877",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0877"
},
{
"name": "CVE-2026-0878",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0878"
},
{
"name": "CVE-2026-0883",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0883"
},
{
"name": "CVE-2026-0880",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0880"
},
{
"name": "CVE-2026-0881",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0881"
},
{
"name": "CVE-2026-0882",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0882"
},
{
"name": "CVE-2026-0884",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0884"
},
{
"name": "CVE-2026-0889",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0889"
},
{
"name": "CVE-2026-0888",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0888"
},
{
"name": "CVE-2026-0886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0886"
},
{
"name": "CVE-2026-0890",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0890"
},
{
"name": "CVE-2026-0891",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0891"
}
],
"initial_release_date": "2026-01-14T00:00:00",
"last_revision_date": "2026-01-15T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0038",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-01-14T00:00:00.000000"
},
{
"description": "Modification d\u0027un syst\u00e8me afffect\u00e9",
"revision_date": "2026-01-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2026-01-13",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-03",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-03/"
},
{
"published_at": "2026-01-13",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-02",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-02/"
},
{
"published_at": "2026-01-13",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2026-01",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-01/"
}
]
}
CERTFR-2025-AVI-1099
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.6 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 146 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 140.6 | ||
| Mozilla | Firefox | Firefox ESR versions antérieures à 146 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.6",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 146",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 140.6",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 146",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-14321",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14321"
},
{
"name": "CVE-2025-14330",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14330"
},
{
"name": "CVE-2025-14333",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14333"
},
{
"name": "CVE-2025-14331",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14331"
},
{
"name": "CVE-2025-14323",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14323"
},
{
"name": "CVE-2025-14329",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14329"
},
{
"name": "CVE-2025-14327",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14327"
},
{
"name": "CVE-2025-14328",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14328"
},
{
"name": "CVE-2025-14325",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14325"
},
{
"name": "CVE-2025-14326",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14326"
},
{
"name": "CVE-2025-14322",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14322"
},
{
"name": "CVE-2025-14332",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14332"
},
{
"name": "CVE-2025-14324",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14324"
}
],
"initial_release_date": "2025-12-11T00:00:00",
"last_revision_date": "2025-12-11T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-1099",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-12-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-12-09",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-95",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-95/"
},
{
"published_at": "2025-12-09",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-96",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/"
}
]
}
CERTFR-2025-AVI-1087
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.31 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.6 | ||
| Mozilla | Firefox | Firefox versions antérieures à 146 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 146 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.31",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.6",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 146",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 146",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-14321",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14321"
},
{
"name": "CVE-2025-14330",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14330"
},
{
"name": "CVE-2025-14333",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14333"
},
{
"name": "CVE-2025-14331",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14331"
},
{
"name": "CVE-2025-14323",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14323"
},
{
"name": "CVE-2025-14329",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14329"
},
{
"name": "CVE-2025-14327",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14327"
},
{
"name": "CVE-2025-14328",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14328"
},
{
"name": "CVE-2025-14325",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14325"
},
{
"name": "CVE-2025-14326",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14326"
},
{
"name": "CVE-2025-14322",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14322"
},
{
"name": "CVE-2025-14332",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14332"
},
{
"name": "CVE-2025-14324",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14324"
}
],
"initial_release_date": "2025-12-10T00:00:00",
"last_revision_date": "2025-12-10T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-1087",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-12-10T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-12-09",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-92",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/"
},
{
"published_at": "2025-12-09",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-93",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-93/"
},
{
"published_at": "2025-12-09",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-94",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/"
}
]
}
CERTFR-2025-AVI-0991
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox | Firefox versions antérieures à 145 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.30 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.5 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 145 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 145",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.30",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.5",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 145",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-13024",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13024"
},
{
"name": "CVE-2025-13022",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13022"
},
{
"name": "CVE-2025-13019",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13019"
},
{
"name": "CVE-2025-13016",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13016"
},
{
"name": "CVE-2025-13023",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13023"
},
{
"name": "CVE-2025-13018",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13018"
},
{
"name": "CVE-2025-13012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13012"
},
{
"name": "CVE-2025-13020",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13020"
},
{
"name": "CVE-2025-13021",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13021"
},
{
"name": "CVE-2025-13017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13017"
},
{
"name": "CVE-2025-13025",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13025"
},
{
"name": "CVE-2025-13015",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13015"
},
{
"name": "CVE-2025-13014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13014"
},
{
"name": "CVE-2025-13027",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13027"
},
{
"name": "CVE-2025-13026",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13026"
},
{
"name": "CVE-2025-13013",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13013"
}
],
"initial_release_date": "2025-11-12T00:00:00",
"last_revision_date": "2025-11-12T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0991",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-11-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la politique de s\u00e9curit\u00e9 et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-11-11",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-88",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-88/"
},
{
"published_at": "2025-11-11",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-87",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-87/"
},
{
"published_at": "2025-11-11",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-89",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-89/"
}
]
}
CERTFR-2025-AVI-0873
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox | Firefox versions antérieures à 144 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 144 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.29 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.4 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 140.4 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 144",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 144",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.29",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.4",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 140.4",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-11712",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11712"
},
{
"name": "CVE-2025-11710",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11710"
},
{
"name": "CVE-2025-11717",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11717"
},
{
"name": "CVE-2025-11714",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11714"
},
{
"name": "CVE-2025-11709",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11709"
},
{
"name": "CVE-2025-11708",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11708"
},
{
"name": "CVE-2025-11720",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11720"
},
{
"name": "CVE-2025-11721",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11721"
},
{
"name": "CVE-2025-11716",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11716"
},
{
"name": "CVE-2025-11711",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11711"
},
{
"name": "CVE-2025-11718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11718"
},
{
"name": "CVE-2025-11715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11715"
},
{
"name": "CVE-2025-11713",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11713"
},
{
"name": "CVE-2025-11719",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11719"
}
],
"initial_release_date": "2025-10-15T00:00:00",
"last_revision_date": "2025-10-15T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0873",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-10-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-81",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-81/"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-85",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-85/"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-82",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-82/"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-83",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-83/"
},
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-84",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-84/"
}
]
}
CERTFR-2025-AVI-0797
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Thunderbird versions antérieures à 140.3 | ||
| Mozilla | Firefox Focus | Focus pour iOS versions antérieures à 143.0 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.3 | ||
| Mozilla | Firefox | Firefox versions antérieures à 143 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.28 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 143 |
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 140.3",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Focus pour iOS versions ant\u00e9rieures \u00e0 143.0",
"product": {
"name": "Firefox Focus",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.3",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 143",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.28",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 143",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-10535",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10535"
},
{
"name": "CVE-2025-10533",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10533"
},
{
"name": "CVE-2025-10530",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10530"
},
{
"name": "CVE-2025-10527",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10527"
},
{
"name": "CVE-2025-10537",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10537"
},
{
"name": "CVE-2025-10532",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10532"
},
{
"name": "CVE-2025-10290",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10290"
},
{
"name": "CVE-2025-10529",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10529"
},
{
"name": "CVE-2025-10528",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10528"
},
{
"name": "CVE-2025-10534",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10534"
},
{
"name": "CVE-2025-10536",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10536"
},
{
"name": "CVE-2025-10531",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10531"
}
],
"initial_release_date": "2025-09-17T00:00:00",
"last_revision_date": "2025-09-17T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0797",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-09-17T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-09-16",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-73",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73/"
},
{
"published_at": "2025-09-16",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-74",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-74/"
},
{
"published_at": "2025-09-16",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-78",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78/"
},
{
"published_at": "2025-09-16",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-77",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77/"
},
{
"published_at": "2025-09-16",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-75",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75/"
},
{
"published_at": "2025-09-16",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-76",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-76/"
}
]
}
CERTFR-2025-AVI-0714
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une injection de code indirecte à distance (XSS).
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.27 | ||
| Mozilla | Firefox | Firefox versions antérieures à 142 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 142 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 128.14 | ||
| Mozilla | Firefox | Firefox pour iOS versions antérieures à 142 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 128.14 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 140.2 | ||
| Mozilla | Firefox Focus | Firefox Focus pour iOS versions antérieures à 142 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.2 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.27",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 142",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 142",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 128.14",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox pour iOS versions ant\u00e9rieures \u00e0 142",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 128.14",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 140.2",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox Focus pour iOS versions ant\u00e9rieures \u00e0 142",
"product": {
"name": "Firefox Focus",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.2",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-55031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55031"
},
{
"name": "CVE-2025-55030",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55030"
},
{
"name": "CVE-2025-55028",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55028"
},
{
"name": "CVE-2025-55032",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55032"
},
{
"name": "CVE-2025-55033",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55033"
},
{
"name": "CVE-2025-55029",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55029"
}
],
"initial_release_date": "2025-08-20T00:00:00",
"last_revision_date": "2025-08-20T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0714",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-20T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une injection de code indirecte \u00e0 distance (XSS).",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-08-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-69",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-69/"
},
{
"published_at": "2025-08-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-65",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-65/"
},
{
"published_at": "2025-08-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-67",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-67/"
},
{
"published_at": "2025-08-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-72",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-72/"
},
{
"published_at": "2025-08-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-71",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-71/"
},
{
"published_at": "2025-08-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-64",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-64/"
},
{
"published_at": "2025-08-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-68",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-68/"
},
{
"published_at": "2025-08-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-66",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-66/"
},
{
"published_at": "2025-08-19",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-70",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-70/"
}
]
}
CERTFR-2025-AVI-0615
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox | Firefox versions antérieures à 141 pour iOS | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 128.13 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 140.1 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 140.1 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 128.13 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.26 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 141 | ||
| Mozilla | Firefox | Firefox versions antérieures à 141 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 141 pour iOS",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 128.13",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 140.1",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 140.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 128.13",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.26",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 141",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 141",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-8027",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8027"
},
{
"name": "CVE-2025-8037",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8037"
},
{
"name": "CVE-2025-54144",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54144"
},
{
"name": "CVE-2025-8034",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8034"
},
{
"name": "CVE-2025-54145",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54145"
},
{
"name": "CVE-2025-8044",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8044"
},
{
"name": "CVE-2025-8041",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8041"
},
{
"name": "CVE-2025-8039",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8039"
},
{
"name": "CVE-2025-54143",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54143"
},
{
"name": "CVE-2025-8035",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8035"
},
{
"name": "CVE-2025-8043",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8043"
},
{
"name": "CVE-2025-8036",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8036"
},
{
"name": "CVE-2025-8032",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8032"
},
{
"name": "CVE-2025-8040",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8040"
},
{
"name": "CVE-2025-8029",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8029"
},
{
"name": "CVE-2025-8038",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8038"
},
{
"name": "CVE-2025-8028",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8028"
},
{
"name": "CVE-2025-8033",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8033"
},
{
"name": "CVE-2025-8030",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8030"
},
{
"name": "CVE-2025-8031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8031"
},
{
"name": "CVE-2025-8042",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8042"
}
],
"initial_release_date": "2025-07-23T00:00:00",
"last_revision_date": "2025-07-23T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0615",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-07-23T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-56",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-56/"
},
{
"published_at": "2025-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-57",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-57/"
},
{
"published_at": "2025-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-63",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-63/"
},
{
"published_at": "2025-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-61",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-61/"
},
{
"published_at": "2025-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-59",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-59/"
},
{
"published_at": "2025-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-60",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-60/"
},
{
"published_at": "2025-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-62",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-62/"
},
{
"published_at": "2025-07-22",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-58",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-58/"
}
]
}
CERTFR-2025-AVI-0536
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 128.12 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.25 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 140 | ||
| Mozilla | Firefox | Firefox versions antérieures à 140 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 128.12",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.25",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 140",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 140",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-6434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6434"
},
{
"name": "CVE-2025-6428",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6428"
},
{
"name": "CVE-2025-6435",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6435"
},
{
"name": "CVE-2025-6433",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6433"
},
{
"name": "CVE-2025-6427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6427"
},
{
"name": "CVE-2025-6430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6430"
},
{
"name": "CVE-2025-6429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6429"
},
{
"name": "CVE-2025-6426",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6426"
},
{
"name": "CVE-2025-6436",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6436"
},
{
"name": "CVE-2025-6425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6425"
},
{
"name": "CVE-2025-6431",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6431"
},
{
"name": "CVE-2025-6432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6432"
},
{
"name": "CVE-2025-6424",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6424"
}
],
"initial_release_date": "2025-06-25T00:00:00",
"last_revision_date": "2025-06-25T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0536",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-06-25T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-06-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-51",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-51/"
},
{
"published_at": "2025-06-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-53",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-53/"
},
{
"published_at": "2025-06-24",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-52",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-52/"
}
]
}
CERTFR-2025-AVI-0454
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox | Firefox versions antérieures à 139 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 128.11 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 128.11 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.24 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 139 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 139",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 128.11",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 128.11",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.24",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 139",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-5264",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5264"
},
{
"name": "CVE-2025-5268",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5268"
},
{
"name": "CVE-2025-5263",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5263"
},
{
"name": "CVE-2025-5265",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5265"
},
{
"name": "CVE-2025-5272",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5272"
},
{
"name": "CVE-2025-5270",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5270"
},
{
"name": "CVE-2025-5269",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5269"
},
{
"name": "CVE-2025-5271",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5271"
},
{
"name": "CVE-2025-5266",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5266"
},
{
"name": "CVE-2025-5267",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5267"
},
{
"name": "CVE-2025-5262",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5262"
}
],
"initial_release_date": "2025-05-28T00:00:00",
"last_revision_date": "2025-05-28T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0454",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-05-28T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-05-27",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-42",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-42/"
},
{
"published_at": "2025-05-27",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-43",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-43/"
},
{
"published_at": "2025-05-27",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-46",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/"
},
{
"published_at": "2025-05-27",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-45",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-45/"
},
{
"published_at": "2025-05-27",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-44",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/"
}
]
}
CERTFR-2025-AVI-0424
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 128.10.1 | ||
| Mozilla | Firefox | Firefox versions antérieures à 138.0.4 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.23.1 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 128.10.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 138.0.4",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.23.1",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-4918",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4918"
},
{
"name": "CVE-2025-4919",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4919"
}
],
"initial_release_date": "2025-05-19T00:00:00",
"last_revision_date": "2025-05-19T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0424",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-05-19T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-05-17",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-38",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-38/"
},
{
"published_at": "2025-05-17",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-37",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-37/"
},
{
"published_at": "2025-05-17",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-36",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-36/"
}
]
}
CERTFR-2025-AVI-0358
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird | Thunderbird versions antérieures à 138 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 128.10 | ||
| Mozilla | Firefox | Firefox versions antérieures à 138 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.23 | ||
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 128.10 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 138",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 128.10",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 138",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.23",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 128.10",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-4088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4088"
},
{
"name": "CVE-2025-4091",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4091"
},
{
"name": "CVE-2025-4093",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4093"
},
{
"name": "CVE-2025-4090",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4090"
},
{
"name": "CVE-2025-4085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4085"
},
{
"name": "CVE-2025-2817",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2817"
},
{
"name": "CVE-2025-4089",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4089"
},
{
"name": "CVE-2025-4087",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4087"
},
{
"name": "CVE-2025-4092",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4092"
},
{
"name": "CVE-2025-4083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4083"
},
{
"name": "CVE-2025-4082",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4082"
},
{
"name": "CVE-2025-4086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4086"
},
{
"name": "CVE-2025-4084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4084"
}
],
"initial_release_date": "2025-04-30T00:00:00",
"last_revision_date": "2025-04-30T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0358",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-04-30T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-31",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-31/"
},
{
"published_at": "2025-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-28",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-28/"
},
{
"published_at": "2025-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-32",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-32/"
},
{
"published_at": "2025-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-30",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-30/"
},
{
"published_at": "2025-04-29",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-29",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/"
}
]
}
CERTFR-2025-AVI-0266
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Mozilla | Thunderbird ESR | Thunderbird ESR versions antérieures à 128.9 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 128.9 | ||
| Mozilla | Thunderbird | Thunderbird versions antérieures à 137 | ||
| Mozilla | Firefox | Firefox versions antérieures à 137 | ||
| Mozilla | Firefox ESR | Firefox ESR versions antérieures à 115.22 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Thunderbird ESR versions ant\u00e9rieures \u00e0 128.9",
"product": {
"name": "Thunderbird ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 128.9",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Thunderbird versions ant\u00e9rieures \u00e0 137",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox versions ant\u00e9rieures \u00e0 137",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions ant\u00e9rieures \u00e0 115.22",
"product": {
"name": "Firefox ESR",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-3032",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3032"
},
{
"name": "CVE-2025-3030",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3030"
},
{
"name": "CVE-2025-3028",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3028"
},
{
"name": "CVE-2025-3031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3031"
},
{
"name": "CVE-2025-3033",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3033"
},
{
"name": "CVE-2025-3029",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3029"
},
{
"name": "CVE-2025-3034",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3034"
},
{
"name": "CVE-2025-3035",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3035"
}
],
"initial_release_date": "2025-04-02T00:00:00",
"last_revision_date": "2025-04-02T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0266",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-04-02T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Mozilla. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": "2025-04-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-21",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-21/"
},
{
"published_at": "2025-04-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-23",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-23/"
},
{
"published_at": "2025-04-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-20",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-20/"
},
{
"published_at": "2025-04-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-24",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-24/"
},
{
"published_at": "2025-04-01",
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2025-22",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-22/"
}
]
}