Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior

Críticas / altas1294▼ 196 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

2087 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-16354	Analizada	Alta (7.5)	0.34%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16353	Analizada	Crítica (9.8)	0.52%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16352	Analizada	Crítica (9.8)	0.39%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16351	Analizada	Crítica (9.8)	0.39%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16350	Analizada	Crítica (9.8)	0.40%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16349	Analizada	Crítica (9.8)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	21/7/2026	24/7/2026	Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-57963	Analizada	Media (6.5)	0.31%	—	Mozilla Thunderbird	1/7/2026	6/7/2026	An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1.
CVE-2026-57962	Analizada	Media (5.3)	0.34%	—	Mozilla Thunderbird	1/7/2026	6/7/2026	A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thunderbird LDAP client until it crashes due to memory exhaustion. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1.
CVE-2026-12330	Analizada	Media (5.4)	0.16%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12.
CVE-2026-12329	Modificada	Media (5.3)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12.
CVE-2026-12328	Modificada	Alta (8.1)	0.48%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in…
CVE-2026-12327	Analizada	Alta (8.1)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152, Firefox…
CVE-2026-12326	Modificada	Alta (8.1)	0.36%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12325	Analizada	Media (6.5)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12324	Analizada	Alta (7.3)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12323	Analizada	Media (5.4)	0.17%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12322	Analizada	Media (5.4)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12321	Analizada	Media (5.4)	0.16%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12320	Analizada	Media (4.3)	0.18%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Information disclosure in the Password Manager component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12319	Analizada	Media (6.5)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12318	Analizada	Alta (7.3)	0.26%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12317	Modificada	Alta (7.5)	0.29%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	18/6/2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12316	Analizada	Crítica (9.1)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12315	Analizada	Crítica (9.1)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12314	Modificada	Alta (7.5)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	18/6/2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.