CVE-2026-0888

low

Red Hat

CVSS v3 Base Score

3.4

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

EPSS Score

0.0%

Exploitation probability in 30 days

Top 98% most likely to be exploited

Attack Characteristics

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Confidentiality

Low

Integrity

None

Availability

None

Published: January 13, 2026 (121 days ago)

Last Modified: January 13, 2026

Vendor: Red Hat

Description

Information disclosure in the XML component. This vulnerability affects Firefox < 147 and Thunderbird < 147.

Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9