CVE-2026-4728: Mozilla Firefox, заобикаляне на вход и права

Описание

Оригинално описание

Spoofing issue in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

Засегнати продукти

• Mozilla Firefox: от 149 нататък
• Mozilla Thunderbird: от 149 нататък

Вид слабост

• CWE-290 Заобикаляне на автентикация чрез подправяне

История

Други уязвимости в Mozilla Firefox

• 8.8CVE-2026-120572
• 7.5CVE-2026-118180
• 8.8CVE-2026-118179
• 9.1CVE-2026-118177
• 5.7CVE-2026-118178

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-4728
• https://nvd.nist.gov/vuln/detail/CVE-2026-4728
• https://bugzilla.mozilla.org/show_bug.cgi?id=2013179
• https://www.mozilla.org/security/advisories/mfsa2026-20/
• https://www.mozilla.org/security/advisories/mfsa2026-23/