Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2739▼ 510 respecto a la semana anterior

Críticas / altas1303▼ 212 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)225▼ 276 respecto a la semana anterior

2030 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-8949	Analizada	Alta (7.5)	0.60%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8948	Modificada	Crítica (9.1)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	15/7/2026	Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8947	Modificada	Alta (7.3)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	15/7/2026	Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8946	Modificada	Alta (7.5)	0.60%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	15/7/2026	Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8094	Modificada	Crítica (9.8)	0.63%	—	Mozilla Firefox Mozilla Thunderbird	7/5/2026	28/7/2026	Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2.
CVE-2026-8093	Modificada	Alta (8.1)	0.42%	—	Mozilla Firefox Mozilla Thunderbird	7/5/2026	15/7/2026	Memory safety bugs present in Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.2 and Thunderbird 150.0.2.
CVE-2026-8092	Modificada	Alta (8.1)	0.54%	—	Mozilla Firefox Mozilla Thunderbird	7/5/2026	28/7/2026	Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR…
CVE-2026-8091	Modificada	Crítica (9.8)	0.60%	—	Mozilla Firefox Mozilla Thunderbird	7/5/2026	11/8/2026	Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.
CVE-2026-8090	Modificada	Alta (7.3)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	7/5/2026	28/7/2026	Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.
CVE-2026-7324	Modificada	Alta (7.3)	0.36%	—	Mozilla Firefox Mozilla Thunderbird	28/4/2026	15/7/2026	Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1 and Thunderbird 150.0.1.
CVE-2026-7323	Modificada	Alta (7.3)	0.46%	—	Mozilla Firefox Mozilla Thunderbird	28/4/2026	15/7/2026	Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1,…
CVE-2026-7322	Modificada	Alta (7.3)	0.47%	—	Mozilla Firefox Mozilla Thunderbird	28/4/2026	15/7/2026	Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox…
CVE-2026-7321	Analizada	Crítica (9.6)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	28/4/2026	17/6/2026	Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.
CVE-2026-7320	Modificada	Alta (7.5)	0.60%	—	Mozilla Firefox Mozilla Thunderbird	28/4/2026	15/7/2026	Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.
CVE-2026-6786	Modificada	Alta (7.5)	0.53%	—	Mozilla Firefox Mozilla Thunderbird	26/4/2026	15/7/2026	Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR…
CVE-2026-6785	Modificada	Alta (7.5)	0.53%	—	Mozilla Firefox Mozilla Thunderbird	26/4/2026	15/7/2026	Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in…
CVE-2026-6784	Modificada	Alta (7.5)	0.42%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	15/7/2026	Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6783	Analizada	Media (5.3)	0.38%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6782	Analizada	Alta (7.5)	0.43%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6781	Analizada	Alta (7.5)	0.52%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6780	Analizada	Alta (7.5)	0.52%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6779	Analizada	Media (5.3)	0.34%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6778	Analizada	Media (5.3)	0.43%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6777	Analizada	Media (5.3)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Other issue in the Networking: DNS component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6776	Analizada	Alta (7.8)	0.16%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.