ByteOS Network

NVD Vulnerability Details :

CVE-2026-2777

Modified

Source-security@mozilla.org

Published At-24 Feb, 2026 | 14:16

Updated At-15 Jul, 2026 | 02:19

Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
			N/A

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: N/A

Version:

Base score:

Base severity: N/A

Vector:

CPE Matches

Mozilla Corporation

>>firefox>>Versions before 115.33.0(exclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*

Mozilla Corporation

>>firefox>>Versions before 148.0(exclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*

Mozilla Corporation

>>firefox>>Versions from 128.0(inclusive) to 140.8.0(exclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*

Mozilla Corporation

>>thunderbird>>Versions before 140.8.0(exclusive)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*

Mozilla Corporation

>>thunderbird>>Versions before 148.0(exclusive)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov
CWE-269	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-269

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=2015305	security@mozilla.org	Issue Tracking Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026-13/	security@mozilla.org	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-14/	security@mozilla.org	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-15/	security@mozilla.org	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-16/	security@mozilla.org	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-17/	security@mozilla.org	Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:3338	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3339	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3361	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3491	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3492	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3493	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3494	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3495	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3496	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3497	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3515	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3516	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3517	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3976	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3978	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3979	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3980	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3981	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3982	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3983	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:3984	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:4022	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:4152	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:4260	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/errata/RHSA-2026:4432	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://access.redhat.com/security/cve/CVE-2026-2777	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=2442312	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2777.json	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=2015305

Source: security@mozilla.org

Resource:

Issue Tracking

Permissions Required

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2026-13/

Source: security@mozilla.org

Resource:

Vendor Advisory

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2026-14/

Source: security@mozilla.org

Resource:

Vendor Advisory

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2026-15/

Source: security@mozilla.org

Resource:

Vendor Advisory

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2026-16/

Source: security@mozilla.org

Resource:

Vendor Advisory

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2026-17/

Source: security@mozilla.org

Resource:

Vendor Advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2026:3338