Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2737▼ 484 respecto a la semana anterior

Críticas / altas1302▼ 187 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

3565 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-74952	Modificada	Alta (8.8)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	1/9/2026	Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2.
CVE-2026-74951	Analizada	Media (6.5)	0.27%	—	Mozilla Firefox Mobile	18/8/2026	19/8/2026	Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74950	Analizada	Alta (8.8)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74949	Modificada	Alta (8.8)	0.47%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	1/9/2026	Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74948	Analizada	Media (6.5)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	24/8/2026	Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74947	Analizada	Alta (8.8)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74946	Analizada	Alta (8.8)	0.49%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74945	Analizada	Media (6.5)	0.44%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	18/8/2026	24/8/2026	Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74944	Modificada	Crítica (9.8)	0.59%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74943	Modificada	Crítica (9.8)	0.61%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74942	Analizada	Alta (8.8)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74941	Analizada	Alta (8.8)	0.48%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74940	Modificada	Crítica (9.8)	0.61%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74939	Analizada	Alta (8.8)	0.45%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74938	Analizada	Crítica (9.1)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	19/8/2026	Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74937	Analizada	Alta (8.8)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	19/8/2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74936	Modificada	Crítica (9.8)	0.59%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74935	Analizada	Alta (8.8)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74934	Analizada	Alta (7.5)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	24/8/2026	Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-18809	Pendiente de análisis	Media (6.5)	0.36%	—	Mozilla Firefox Android^AI Mozilla Firefox Focus Android^AI	4/8/2026	18/8/2026	Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3.
CVE-2026-16412	Modificada	Crítica (9.8)	0.52%	—	Mozilla Firefox	21/7/2026	24/7/2026	Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and…
CVE-2026-16411	Modificada	Crítica (9.8)	0.49%	—	Mozilla Firefox	21/7/2026	24/7/2026	Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16410	Analizada	Crítica (9.8)	0.30%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16409	Analizada	Alta (7.5)	0.29%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16408	Modificada	Crítica (9.8)	0.43%	—	Mozilla Firefox	21/7/2026	22/7/2026	Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.