CVE-2026-57501

{
  "id": "CVE-2026-57501",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-09T23:17:05.353",
  "lastModified": "2026-10-25T15:10:00.147",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance and Split link in new tab, load a page-controlled link URL with the System principal instead of the originating page's principal, allowing a malicious web page to place a link to a file URL that can load with System privileges when opened through either context-menu item and bypass the content-to-file security check that blocks an ordinary click. This issue is fixed in version 1.21.5b."
    },
    {
      "lang": "es",
      "value": "Zen es un navegador basado en Firefox. Antes de la versión 1.21.5b, las acciones del menú contextual de vista rápida (glance) y vista dividida (split-view) de Zen, ’Abrir enlace en vista rápida’ y ’Dividir enlace en nueva pestaña’, cargan una URL de enlace controlada por la página con el principal del Sistema en lugar del principal de la página de origen, permitiendo que una página web maliciosa coloque un enlace a una URL de archivo que puede cargarse con privilegios de Sistema cuando se abre a través de cualquiera de los elementos del menú contextual y eludir la comprobación de seguridad de contenido a archivo que bloquea un clic ordinario. Este problema está solucionado en la versión 1.21.5b."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "zen-browser",
          "product": "desktop",
          "versions": [
            {
              "version": "< 1.21.5b",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N",
          "baseScore": 0.0,
          "baseSeverity": "NONE",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 0.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-10T20:46:27.753145Z",
          "id": "CVE-2026-57501",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-266"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/zen-browser/desktop/commit/44f7616238208200547c7df500d945752d7b6379",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/zen-browser/desktop/releases/tag/1.21.5b",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/zen-browser/desktop/security/advisories/GHSA-vpvg-hp3v-rm5q",
      "source": "[email protected]"
    }
  ]
}