Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior

Críticas / altas1294▼ 234 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior

3565 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-8966	Analizada	Alta (7.5)	0.43%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	23/7/2026	Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8965	Analizada	Alta (7.5)	0.43%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	23/7/2026	Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8964	Analizada	Alta (7.5)	0.39%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	23/7/2026	Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8963	Analizada	Alta (7.5)	0.40%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	23/7/2026	Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8962	Analizada	Alta (8.1)	0.40%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	23/7/2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8961	Analizada	Media (6.5)	0.35%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	23/7/2026	Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8960	Analizada	Alta (7.5)	0.40%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8959	Analizada	Crítica (9.6)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8958	Analizada	Alta (8.6)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8957	Modificada	Alta (8.8)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8956	Analizada	Crítica (9.8)	0.64%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8955	Modificada	Alta (8.8)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8954	Analizada	Alta (7.5)	0.43%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8953	Analizada	Crítica (9.6)	0.46%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8952	Modificada	Alta (8.8)	0.40%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8951	Analizada	Media (6.5)	0.27%	—	Mozilla Firefox	19/5/2026	17/6/2026	Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151.
CVE-2026-8950	Analizada	Crítica (9.3)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8949	Analizada	Alta (7.5)	0.60%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	17/6/2026	Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8948	Modificada	Crítica (9.1)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	15/7/2026	Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-8947	Modificada	Alta (7.3)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	15/7/2026	Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8946	Modificada	Alta (7.5)	0.60%	—	Mozilla Firefox Mozilla Thunderbird	19/5/2026	15/7/2026	Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8945	Modificada	Alta (7.5)	0.40%	—	Mozilla Firefox Mozilla Firefox Focus	19/5/2026	15/7/2026	Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.
CVE-2026-42177	Aplazada	Media (5.3)	0.31%	—	Linux-entra-sso^AI Google Chrome^AI Mozilla Firefox^AI Microsoft Entra ID^AI	12/5/2026	17/6/2026	linux-entra-sso is a browser plugin for Linux to SSO on Microsoft Entra ID. Prior to 1.8.1, platform/chrome/js/platform-chrome.js:69-88 registers a single declarativeNetRequest rule whose urlFilter is Platform.SSO_URL + "/", i.e. "https://login.microsoftonline.com/". Chrome's urlFilter without a \| or \|\| anchor is…
CVE-2026-8401	Modificada	Crítica (9.8)	0.60%	—	Mozilla Firefox	12/5/2026	15/7/2026	Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.
CVE-2026-8391	Modificada	Media (5.3)	0.56%	—	Mozilla Firefox	12/5/2026	15/7/2026	Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.