EN PT-BR
← Voltar ao feed
medium

CERT-FR advisory: unspecified vulnerability in Firefox for Android before 158.0.2 (CVE-2026-113470, Mozilla MFSA 2026-116)

1 fonte(s) · 1 atualização(ões) · publicado 21/10/2026 21:00 · coletado há 6 dias

CERT-FR published advisory CERTFR-2026-AVI-1361 on a vulnerability in Mozilla products, specifically Firefox for Android versions earlier than 158.0.2. The advisory says the flaw lets an attacker cause a security problem that the vendor has not specified. It is tracked as CVE-2026-113470 and covered by Mozilla security bulletin mfsa2026-116, dated 21 October 2026. The advisory does not report active exploitation and gives no CVSS score, vulnerability class or technical details.

Entenda a falha

A vulnerabilidade

CVE-2026-113470 is a vulnerability in Mozilla Firefox for Android affecting versions earlier than 158.0.2. CERT-FR (advisory CERTFR-2026-AVI-1361) says it lets an attacker cause a security problem that the vendor has not specified. The advisory gives no flaw class, component, attack requirements (network, authentication, user interaction) or CVSS score. The fix is in Firefox for Android 158.0.2, covered by Mozilla bulletin mfsa2026-116 of 21 October 2026.

Como foi descoberta

The CERT-FR advisory only says a vulnerability was discovered in Mozilla products and does not say who found it or how. It points to Mozilla bulletin mfsa2026-116 of 21 October 2026 and to the CVE record; CERT-FR published its advisory on 22 October 2026. It does not report active exploitation.

Explicação gerada por IA a partir da matéria e dos artigos, em 26/10/2026 14:19.

Detalhes técnicos

  • Affected: Firefox for Android before 158.0.2.
  • Impact: not specified by the vendor; the advisory gives no attack vector or flaw type.
  • Reference: Mozilla bulletin mfsa2026-116 and CVE-2026-113470.

Remediação

  • Update Firefox for Android to version 158.0.2 or later, as described in Mozilla bulletin mfsa2026-116, as CERT-FR directs.

Linha do tempo

  1. cert.cyber.gouv.fr ↗ · pub. 21/10/2026 21:00 · coletado 26/10 14:01 primeiro registro

    CERT-FR advisory: unspecified vulnerability in Firefox for Android before 158.0.2 (CVE-2026-113470, Mozilla MFSA 2026-116)

    ler a análise desta fonte

    CERT-FR published advisory CERTFR-2026-AVI-1361 on a vulnerability in Mozilla products, specifically Firefox for Android versions earlier than 158.0.2. The advisory says the flaw lets an attacker cause a security problem that the vendor has not specified. It is tracked as CVE-2026-113470 and covered by Mozilla security bulletin mfsa2026-116, dated 21 October 2026. The advisory does not report active exploitation and gives no CVSS score, vulnerability class or technical details.

    Technical Details

    • Affected: Firefox for Android before 158.0.2.
    • Impact: not specified by the vendor; the advisory gives no attack vector or flaw type.
    • Reference: Mozilla bulletin mfsa2026-116 and CVE-2026-113470.

    Remediation

    • Update Firefox for Android to version 158.0.2 or later, as described in Mozilla bulletin mfsa2026-116, as CERT-FR directs.