CVE-2026-0887

Clickjacking issue, information disclosure in the PDF Viewer component

CVSS 4.3 MEDIUMEPSS 0.3%CWE-497

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 4.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

13 jan 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Produtos afetados

Mozilla · Firefox Mozilla · Thunderbird

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://bugzilla.mozilla.org/show_bug.cgi?id=2006500 https://www.mozilla.org/security/advisories/mfsa2026-01/https://www.mozilla.org/security/advisories/mfsa2026-03/https://www.mozilla.org/security/advisories/mfsa2026-04/https://www.mozilla.org/security/advisories/mfsa2026-05/