CVE-2026-100820
Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, T
CVSS
8.8
Alto
EPSS
0.2%
p13
KEV
—
Exploit Today
4
0-100
Publicado: 29 sept 2026 · Última mod.: 5 oct 2026 · CWE-269
0.2%EPSS · 30 días0.2%
2026-09-302026-10-19
Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=2071645
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-100/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-101/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-102/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-103/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-97/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-99/
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1140698.1 ALT—
———Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1/projects/:projectRef/envvars endpoint, which returns the environment's root API key as TRIGGER_SECRET_KEY for staging, production, and preview environments. Attackers holding a restricted read:envvars key can obtain the root secret and plaintext secrets, then trigger tasks and mint admin public JWTs.5hCVE-2026-1053129.9 CRÍ—
———A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding to a ClusterRole granting cluster-wide get/list/watch on all Strimzi CRDs (including KafkaUsers), patch on Kafkas/KafkaRebalances, and cluster-monitoring-view. The attacker's code reads the projected SA token and gains cross-tenant Strimzi control-plane read+write access.13hCVE-2026-869333.3 BAJ—
——0A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.15hCVE-2026-869216.2 MED—
——0A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.15hCVE-2026-288537.8 ALT—
——0The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.15hCVE-2026-1054538.4 ALT—
——0IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.13h