VDB
CVE-2026-2801
CVE-2026-2801
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Firefox ist ein Open Source Web Browser. Firefox ist ein Open Source Web Browser. ESR ist die Variante mit verlängertem Support. Thunderbird ist ein Open Source E-Mail Client.
EPSS 0.55% · 44.7th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.55%
44.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Xerox | Xerox FreeFlow Print Server v9 | |
| Oracle | Oracle Linux | |
| Amazon | Amazon Linux 2 | |
| Ubuntu | Ubuntu Linux | |
| Mozilla | Mozilla Firefox iOS <147.4 | |
| Mozilla | Mozilla Thunderbird <140.8 | |
| Red Hat | Red Hat Enterprise Linux | |
| Mozilla | Mozilla Thunderbird <148 | |
| Xerox | Xerox FreeFlow Print Server v2 | |
| IGEL | IGEL OS | |
| Debian | Debian Linux | |
| RESF | RESF Rocky Linux | |
| SUSE | SUSE openSUSE | |
| SUSE | SUSE Linux | |
| Xerox | Xerox FreeFlow Print Server v7 | |
| Mozilla | Mozilla Firefox <148 | |
| Mozilla | Mozilla Firefox ESR <140.8 | |
| Mozilla | Mozilla Firefox ESR <115.33 |
Timeline
- Feb 19, 2026 CVE ID Reserved
- Feb 24, 2026 CVE Published
- Feb 25, 2026 EPSS Score
- Feb 27, 2026 EPSS Score
- Mar 1, 2026 EPSS Score
- Mar 4, 2026 EPSS Score
- Mar 6, 2026 EPSS Score
- Mar 8, 2026 EPSS Score
- Mar 10, 2026 EPSS Score
- Mar 12, 2026 EPSS Score
- Mar 14, 2026 EPSS Score
- Mar 17, 2026 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0497.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0497 advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-12/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-13/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-14/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-15/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-16/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2026-17/ advisory
- https://access.redhat.com/errata/RHSA-2026:3339 advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QOYQZDLF7VEL3ZUY46SS34MOSIMJTZ3L/ advisory
- https://lists.debian.org/debian-security-announce/2026/msg00057.html advisory
- https://access.redhat.com/errata/RHSA-2026:3361 advisory
- https://access.redhat.com/errata/RHSA-2026:3338 advisory
- https://lists.debian.org/debian-security-announce/2026/msg00058.html advisory
- http://linux.oracle.com/errata/ELSA-2026-3339.html advisory
- https://errata.build.resf.org/RLSA-2026:3361 advisory
- https://errata.build.resf.org/RLSA-2026:3339 advisory
- https://errata.build.resf.org/RLSA-2026:3338 advisory
- https://linux.oracle.com/errata/ELSA-2026-3361.html advisory
- http://linux.oracle.com/errata/ELSA-2026-3338.html advisory
…and 55 more