Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2736▼ 485 respecto a la semana anterior

Críticas / altas1304▼ 186 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)226▼ 276 respecto a la semana anterior

3953 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-12309	Modificada	Media (6.5)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	18/6/2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12308	Modificada	Media (5.3)	0.26%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	18/6/2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12307	Modificada	Media (5.3)	0.26%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	18/6/2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12306	Modificada	Media (5.3)	0.26%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	18/6/2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12305	Modificada	Alta (7.5)	0.37%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	18/6/2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12304	Analizada	Crítica (9.1)	0.19%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12303	Analizada	Media (4.3)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12302	Analizada	Media (6.5)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	17/6/2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12301	Modificada	Media (5.3)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	18/6/2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12300	Modificada	Media (5.3)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	18/6/2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12299	Modificada	Media (5.4)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12298	Modificada	Media (5.4)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12297	Modificada	Crítica (9.6)	0.39%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12296	Modificada	Crítica (9.6)	0.39%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12295	Modificada	Crítica (9.6)	0.39%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12294	Modificada	Crítica (9.6)	0.36%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12293	Modificada	Crítica (9.8)	0.30%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12292	Modificada	Alta (8.1)	0.49%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12291	Modificada	Alta (8.8)	0.38%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12290	Modificada	Alta (8.1)	0.40%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12289	Modificada	Alta (8.8)	0.40%	—	Mozilla Firefox Mozilla Thunderbird	16/6/2026	15/7/2026	Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-50881	Aplazada	Alta (8.1)	0.35%	—	Mozilla Bonsai^AI	15/6/2026	17/6/2026	Incorrect access control in the impworks Bonsai v6.0 allows authenticated attackers with Editor privileges to escalate privileges to Administrator and execute unauthorized account, password, and configuration changes.
CVE-2026-12068	Aplazada	Alta (7.4)	0.26%	—	Avira Password Manager^AI Mozilla Firefox^AI	12/6/2026	23/7/2026	Information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox may allow a remote attacker operating a cross-origin iframe to obtain credentials autofilled for the parent web page via incorrect autofill field selection. This issue affects Avira Password Manager when used with Mozilla…
CVE-2026-11799	Analizada	Alta (7.5)	0.22%	—	Mozilla Focus Mozilla Klar	9/6/2026	23/7/2026	UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1.
CVE-2023-43686	Aplazada	Media (6.2)	0.12%	—	Malwarebytes^AI Malwarebytes Nebula^AI Mozilla Firefox^AI	9/6/2026	23/7/2026	An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). A large number of Firefox preference files can cause the parser to ignore other browser configuration files, leading to a denial of service.