CNNVD-202601-2281 Information

CNNVD ID

CNNVD-202601-2281

CVE-2026-0890

  • CNNVD Published: 2026-01-13

Description (Chinese)

Mozilla Firefox和Mozilla Firefox ESR都是美国Mozilla基金会的产品。Mozilla Firefox是一款开源Web浏览器。Mozilla Firefox ESR是Firefox(Web浏览器)的一个延长支持版本。 Mozilla Firefox 147之前版本和Mozilla Firefox ESR 140.7之前版本存在安全漏洞,该漏洞源于DOM Copy & Paste和Drag & Drop组件存在欺骗问题。

Description (English)

Mozilla Firefox and Mozilla Firefox ESR are products of the Mozilla Foundation in the United States. Mozilla Firefox is an open-source Web browser. Mozilla Firefox ESR is an extended support version of Firefox (Web Browser). Prior to Mozilla Firefox 147 and prior to Mozilla Firefox ESR 1407, there was a security loophole, which stemmed from fraud in the DOM Copy & Paste and Drag & Drop components.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Mozilla

Published

2026-01-13

Last Modified

2026-02-24

References

https://www.mozilla.org/security/advisories/mfsa2026-01/ https://www.mozilla.org/security/advisories/mfsa2026-05/ https://www.mozilla.org/security/advisories/mfsa2026-03/ https://www.mozilla.org/security/advisories/mfsa2026-04/ https://bugzilla.mozilla.org/show_bug.cgi?id=2005081

Patch

https://www.mozilla.org/security/advisories/mfsa2026-01/

Share on: