CVE-2026-0887
published 2026-01-13CVE-2026-0887: Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and…
medium4.3CVSS 3.1
AVNACLPRNUIRSUCLINAN
Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | < firefox 147.0-1 (sid) | firefox 147.0-1 (sid) |
| debian | firefox-esr | < firefox 147.0-1 (sid) | firefox 147.0-1 (sid) |
| debian | thunderbird | < firefox 147.0-1 (sid) | firefox 147.0-1 (sid) |
| mozilla | firefox | < 140.7.0 | 140.7.0 |
| mozilla | firefox | < 147.0 | 147.0 |
| mozilla | firefox | — | — |
| mozilla | thunderbird | < 140.7.0 | 140.7.0 |
| mozilla | thunderbird | < 147.0 | 147.0 |
| mozilla | thunderbird | >= 0 < 1:140.7.0esr-1~deb11u1 | 1:140.7.0esr-1~deb11u1 |
| mozilla | thunderbird | >= 0 < 1:140.7.0esr-1~deb12u1 | 1:140.7.0esr-1~deb12u1 |
| mozilla | thunderbird | >= 0 < 1:140.7.0esr-1~deb13u1 | 1:140.7.0esr-1~deb13u1 |
| mozilla | thunderbird | >= 0 < 1:140.7.0esr-1 | 1:140.7.0esr-1 |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
osv4.3MEDIUM