Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior

Críticas / altas1294▼ 196 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

3953 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-74937	Analizada	Alta (8.8)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	19/8/2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74936	Modificada	Crítica (9.8)	0.59%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74935	Analizada	Alta (8.8)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74934	Analizada	Alta (7.5)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	24/8/2026	Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-18809	Pendiente de análisis	Media (6.5)	0.36%	—	Mozilla Firefox Android^AI Mozilla Firefox Focus Android^AI	4/8/2026	18/8/2026	Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3.
CVE-2026-14899	Analizada	Alta (7.5)	0.27%	—	Mozilla Thunderbird	22/7/2026	12/8/2026	The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and…
CVE-2026-16412	Modificada	Crítica (9.8)	0.52%	—	Mozilla Firefox	21/7/2026	24/7/2026	Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and…
CVE-2026-16411	Modificada	Crítica (9.8)	0.49%	—	Mozilla Firefox	21/7/2026	24/7/2026	Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16410	Analizada	Crítica (9.8)	0.30%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16409	Analizada	Alta (7.5)	0.29%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16408	Modificada	Crítica (9.8)	0.43%	—	Mozilla Firefox	21/7/2026	22/7/2026	Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16407	Analizada	Crítica (9.8)	0.28%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16406	Modificada	Crítica (9.1)	0.25%	—	Mozilla Firefox	21/7/2026	22/7/2026	Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16405	Modificada	Alta (7.5)	0.26%	—	Mozilla Firefox	21/7/2026	22/7/2026	Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16404	Analizada	Alta (7.4)	0.16%	—	Mozilla Firefox Mobile	21/7/2026	24/7/2026	Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.
CVE-2026-16403	Analizada	Media (6.5)	0.20%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16402	Analizada	Crítica (9.8)	0.34%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16401	Modificada	Alta (8.8)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16400	Analizada	Alta (7.5)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16399	Analizada	Alta (7.5)	0.15%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16398	Analizada	Alta (7.5)	0.15%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16397	Analizada	Media (6.5)	0.17%	—	Mozilla Firefox	21/7/2026	22/7/2026	Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.
CVE-2026-16396	Modificada	Alta (8.8)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16395	Modificada	Crítica (9.8)	0.34%	—	Mozilla Firefox	21/7/2026	22/7/2026	Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16394	Modificada	Crítica (9.1)	0.25%	—	Mozilla Firefox	21/7/2026	22/7/2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.