Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2736▼ 485 respecto a la semana anterior

Críticas / altas1304▼ 186 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)226▼ 276 respecto a la semana anterior

2087 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-6775	Analizada	Media (5.3)	0.34%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6774	Analizada	Media (5.4)	0.26%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6773	Analizada	Alta (7.5)	0.58%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6772	Analizada	Alta (7.5)	0.46%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6771	Analizada	Crítica (9.8)	0.53%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6770	Analizada	Media (6.5)	0.40%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6769	Analizada	Alta (8.8)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6768	Analizada	Crítica (9.8)	0.51%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6767	Analizada	Media (5.3)	0.38%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6766	Analizada	Alta (7.5)	0.43%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6765	Analizada	Media (5.3)	0.36%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6764	Analizada	Media (6.5)	0.40%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6763	Analizada	Media (6.5)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6762	Analizada	Media (6.3)	0.28%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6761	Analizada	Alta (8.8)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6760	Analizada	Crítica (9.8)	0.51%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6759	Analizada	Alta (7.5)	0.52%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6758	Analizada	Alta (7.5)	0.50%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6757	Analizada	Media (6.3)	0.28%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6755	Analizada	Media (6.5)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	17/6/2026	Mitigation bypass in the DOM: postMessage component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.
CVE-2026-6754	Modificada	Alta (7.5)	0.58%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	15/7/2026	Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6753	Modificada	Alta (7.3)	0.46%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	15/7/2026	Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6752	Modificada	Alta (7.3)	0.46%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	15/7/2026	Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6751	Modificada	Alta (7.3)	0.46%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	15/7/2026	Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVE-2026-6750	Modificada	Alta (8.8)	0.59%	—	Mozilla Firefox Mozilla Thunderbird	21/4/2026	15/7/2026	Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.