Alert GCSA-26056 - Aggiornamento di sicurezza per prodotti Mozilla
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-26056 Data: 8 Aprile 2026 Titolo: Aggiornamento di sicurezza per prodotti Mozilla ****************************************************************** :: Descrizione del problema Sono state riscontrate vulnerabilita' multiple nei prodotti Mozilla, che potrebbero consentire ad un attaccante remoto di eseguire codice arbitrario ed innescare condizioni di Denial of Service su un sistema affetto. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Firefox versioni precedenti alla 149.0.2 Firefox ESR versioni precedenti alla 115.34.1 Firefox ESR versioni precedenti alla 140.9.1 Thunderbird versioni precedenti alla 140.9.1 Thunderbird versioni precedenti alla 149.0.2 :: Impatto Remote Code Execution Denial of Service :: Soluzioni Aggiornare Firefox all'ultima versione https://support.mozilla.org/en-US/kb/update-firefox-latest-release https://www.mozilla.org/it/firefox/new/ https://www.mozilla.org/it/firefox/enterprise/ https://www.mozilla.org/it/firefox/all/#product-desktop-release Aggiornare Thunderbird all'ultima versione https://support.mozilla.org/it/kb/aggiornamento-di-thunderbird https://www.mozilla.org/it/thunderbird/ https://www.thunderbird.net/it/thunderbird/all/ https://www.thunderbird.net/it/thunderbird/releases/ :: Riferimenti Mozilla Foundation Security Advisory https://www.mozilla.org/en-US/security/advisories/ https://www.mozilla.org/en-US/security/advisories/mfsa2026-25/ https://www.mozilla.org/en-US/security/advisories/mfsa2026-26/ https://www.mozilla.org/en-US/security/advisories/mfsa2026-27/ https://www.mozilla.org/en-US/security/advisories/mfsa2026-28/ https://www.mozilla.org/en-US/security/advisories/mfsa2026-29/ Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5731 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5732 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5733 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5734 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5735 GARR CERT Security Alert - subscribe/unsubscribe: https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCadYXNgAKCRDBnEyTZRJg Qq4iAKC6n2AeOkm9ILTRh7JWazmDXb8JQQCgiQNhErMChEwM7dqgK0hZs3xQlnQ= =VKRO -----END PGP SIGNATURE-----