远程 macOS 或 Mac OS X 主机上安装的 Mozilla Firefox 版本低于 159.0.1。因此，该应用程序受到 mfsa2026-123 公告中提及的漏洞的影响。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

遠端 macOS 或 Mac OS X 主機上安裝的 Firefox 版本低於 159.0.1。因此，該應用程式受到 mfsa2026-123 公告中提及的弱點的影響。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Windows 主機上安裝的 Firefox 版本是 159.0.1 之前版本。It is, therefore, affected by a vulnerability as referenced in the mfsa2026-123 advisory.

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程 Windows 主机上安装的 Firefox 版本低于 159.0.1。因此，该应用程序受到 mfsa2026-123 公告中提及的漏洞的影响。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

リモートの macOS または Mac OS X ホストにインストールされている Firefox のバージョンは、159.0.1 より前のものです。したがって、mfsa2026-123 のアドバイザリに記載されている脆弱性の影響を受けます。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートの Windows ホストにインストールされている Firefox のバージョンは、159.0.1 より前です。したがって、mfsa2026-123 のアドバイザリに記載されている脆弱性の影響を受けます。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The version of Firefox installed on the remote Windows host is prior to 159.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-123 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 159.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-123 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 160.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-128 advisory.

  - Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in     Firefox 160, Firefox ESR 153.7, and Thunderbird 160. (CVE-2026-124948)

  - Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox     160, Firefox ESR 153.7, and Thunderbird 160. (CVE-2026-124917)

  - When a message was forwarded inline, edited as new, or had an attachment dragged into a compose window, a     specially crafted link attachment (a .desktop file on Linux, or a .url or .lnk file on Windows) was     replaced with the content of the file or URL it pointed to when the message was saved or sent. This could     disclose local files, or content from the user's network, to the message recipients or to the mail     provider.  This bug only affects Thunderbird on Linux and Windows. Other operating systems are unaffected.
    (CVE-2026-126132)

  - When a CalDAV or ICS calendar was accessed through an HTTP proxy that requested authentication,     Thunderbird could answer the proxy with the calendar server's username and password. This affected both     setting up a new calendar and syncing existing calendars, where a saved password could be sent without any     user interaction. A malicious or compromised proxy could use this to obtain the calendar credentials, even     for calendars served over HTTPS. (CVE-2026-126133)

  - Thunderbird allowed feed subscriptions to file: URLs that point to a network share. If a user was tricked     into subscribing to such a URL, Thunderbird connected to the attacker's server when fetching the feed.
    Windows then sent the user's NTLM credentials to that server.  This bug only affects Thunderbird on     Windows. Other operating systems are unaffected. (CVE-2026-126134)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 160.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-128 advisory.

  - Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in     Firefox 160, Firefox ESR 153.7, and Thunderbird 160. (CVE-2026-124948)

  - Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox     160, Firefox ESR 153.7, and Thunderbird 160. (CVE-2026-124917)

  - When a message was forwarded inline, edited as new, or had an attachment dragged into a compose window, a     specially crafted link attachment (a .desktop file on Linux, or a .url or .lnk file on Windows) was     replaced with the content of the file or URL it pointed to when the message was saved or sent. This could     disclose local files, or content from the user's network, to the message recipients or to the mail     provider.  This bug only affects Thunderbird on Linux and Windows. Other operating systems are unaffected.
    (CVE-2026-126132)

  - When a CalDAV or ICS calendar was accessed through an HTTP proxy that requested authentication,     Thunderbird could answer the proxy with the calendar server's username and password. This affected both     setting up a new calendar and syncing existing calendars, where a saved password could be sent without any     user interaction. A malicious or compromised proxy could use this to obtain the calendar credentials, even     for calendars served over HTTPS. (CVE-2026-126133)

  - Thunderbird allowed feed subscriptions to file: URLs that point to a network share. If a user was tricked     into subscribing to such a URL, Thunderbird connected to the attacker's server when fetching the feed.
    Windows then sent the user's NTLM credentials to that server.  This bug only affects Thunderbird on     Windows. Other operating systems are unaffected. (CVE-2026-126134)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in     Firefox 159.0.1. (CVE-2026-120572)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
375480	Mozilla Firefox < 159.0.1	Nessus	MacOS X Local Security Checks	2026/11/3	2026/11/5	high
375480	Mozilla Firefox < 159.0.1	Nessus	MacOS X Local Security Checks	2026/11/3	2026/11/5	high
375481	Mozilla Firefox < 159.0.1	Nessus	Windows	2026/11/3	2026/11/5	high
375481	Mozilla Firefox < 159.0.1	Nessus	Windows	2026/11/3	2026/11/5	high
375480	Mozilla Firefox < 159.0.1	Nessus	MacOS X Local Security Checks	2026/11/3	2026/11/5	high
375481	Mozilla Firefox < 159.0.1	Nessus	Windows	2026/11/3	2026/11/5	high
375481	Mozilla Firefox < 159.0.1	Nessus	Windows	2026/11/3	2026/11/5	high
375480	Mozilla Firefox < 159.0.1	Nessus	MacOS X Local Security Checks	2026/11/3	2026/11/5	high
378427	Mozilla Thunderbird < 160.0	Nessus	Windows	2026/11/10	2026/11/10	critical
378428	Mozilla Thunderbird < 160.0	Nessus	MacOS X Local Security Checks	2026/11/10	2026/11/10	critical
376490	Linux Distros Unpatched Vulnerability : CVE-2026-120572	Nessus	Misc.	2026/11/5	2026/11/5	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

critical

critical

high