The version of Firefox ESR installed on the remote Windows host is prior to 153.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-93 advisory.

  - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156 and     Firefox ESR 153.3. (CVE-2026-92073)

  - Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156,     Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. (CVE-2026-92017)

  - Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156,     Firefox ESR 140.16, and Firefox ESR 153.3. (CVE-2026-92005)

  - Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This     vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
    (CVE-2026-92006, CVE-2026-92007, CVE-2026-92008, CVE-2026-92009, CVE-2026-92010, CVE-2026-92011,     CVE-2026-92012, CVE-2026-92013)

  - Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox     ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. (CVE-2026-92015)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-93 advisory.

  - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156 and     Firefox ESR 153.3. (CVE-2026-92073)

  - Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156,     Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. (CVE-2026-92017)

  - Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156,     Firefox ESR 140.16, and Firefox ESR 153.3. (CVE-2026-92005)

  - Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This     vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
    (CVE-2026-92006, CVE-2026-92007, CVE-2026-92008, CVE-2026-92009, CVE-2026-92010, CVE-2026-92011,     CVE-2026-92012, CVE-2026-92013)

  - Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox     ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. (CVE-2026-92015)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of mozilla-firefox installed on the remote host is prior to 140.16.0esr / 153.3.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-259-01 advisory.

    New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the mozilla-firefox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of mozilla-thunderbird installed on the remote host is prior to 140.16.0esr / 153.3.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-259-02 advisory.

    New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the mozilla-thunderbird security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 156.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-94 advisory.

  - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156,     Firefox ESR 153.3, and Thunderbird 156. (CVE-2026-92073)

  - A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential     memory safety violations. (CVE-2026-92238)

  - A maliciously constructed IMAP line could cause an out-of-bounds buffer read. (CVE-2026-92239)

  - A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by     sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is reachable before     authentication. (CVE-2026-92240)

  - Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156,     Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16. (CVE-2026-92005)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-96 advisory.

  - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156,     Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. (CVE-2026-92073)

  - A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential     memory safety violations. (CVE-2026-92238)

  - A maliciously constructed IMAP line could cause an out-of-bounds buffer read. (CVE-2026-92239)

  - A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by     sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is reachable before     authentication. (CVE-2026-92240)

  - Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156,     Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
    (CVE-2026-92005)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
345905	Mozilla Firefox ESR < 153.3	Nessus	Windows	2026/9/15	2026/9/15	high
345908	Mozilla Firefox ESR < 153.3	Nessus	MacOS X Local Security Checks	2026/9/15	2026/9/15	high
346748	Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-259-01)	Nessus	Slackware Local Security Checks	2026/9/16	2026/9/16	high
346749	Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-259-02)	Nessus	Slackware Local Security Checks	2026/9/16	2026/9/16	high
346179	Mozilla Thunderbird < 156.0	Nessus	Windows	2026/9/16	2026/9/16	high
346319	Mozilla Thunderbird < 153.3	Nessus	MacOS X Local Security Checks	2026/9/16	2026/9/16	high

检测

插件搜索

high

high

high

high

high

high