Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2680▼ 660 respecto a la semana anterior

Críticas / altas1277▼ 279 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)228▼ 274 respecto a la semana anterior

2030 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-0890	Modificada	Media (5.4)	0.30%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	17/6/2026	Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0889	Modificada	Alta (7.5)	0.60%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	17/6/2026	Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.
CVE-2026-0888	Modificada	Media (5.3)	0.35%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	17/6/2026	Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.
CVE-2026-0887	Modificada	Media (4.3)	0.33%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	17/6/2026	Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0886	Modificada	Media (5.3)	0.50%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	17/6/2026	Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0885	Modificada	Media (6.5)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	17/6/2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0884	Modificada	Crítica (9.8)	0.47%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	17/6/2026	Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0883	Modificada	Media (5.3)	0.47%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	17/6/2026	Information disclosure in the Networking component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0882	Modificada	Alta (8.8)	0.47%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	15/7/2026	Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0881	Modificada	Crítica (10)	0.36%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	15/7/2026	Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.
CVE-2026-0880	Modificada	Alta (8.8)	0.66%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	15/7/2026	Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0879	Modificada	Crítica (9.8)	0.61%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	15/7/2026	Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0878	Modificada	Alta (8)	0.48%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	15/7/2026	Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0877	Modificada	Alta (8.1)	0.48%	—	Mozilla Firefox Mozilla Thunderbird	13/1/2026	15/7/2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2025-14333	Modificada	Alta (8.1)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	9/12/2025	7/10/2026	Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146, Firefox ESR…
CVE-2025-14332	Modificada	Alta (7.3)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	9/12/2025	7/10/2026	Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146 and Thunderbird 146.
CVE-2025-14331	Modificada	Media (6.5)	0.19%	—	Mozilla Firefox Mozilla Thunderbird	9/12/2025	7/10/2026	Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14330	Modificada	Crítica (9.8)	0.51%	—	Mozilla Firefox Mozilla Thunderbird	9/12/2025	7/10/2026	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14329	Modificada	Alta (8.8)	0.40%	—	Mozilla Firefox Mozilla Thunderbird	9/12/2025	7/10/2026	Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14328	Modificada	Alta (8.8)	0.40%	—	Mozilla Firefox Mozilla Thunderbird	9/12/2025	7/10/2026	Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14327	Modificada	Alta (7.5)	0.38%	—	Mozilla Firefox Mozilla Thunderbird	9/12/2025	7/10/2026	Spoofing issue in the Downloads Panel component. This vulnerability was fixed in Firefox 146, Thunderbird 146, Firefox ESR 140.7, and Thunderbird 140.7.
CVE-2025-14326	Modificada	Crítica (9.8)	0.46%	—	Mozilla Firefox Mozilla Thunderbird	9/12/2025	7/10/2026	Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146.
CVE-2025-14325	Modificada	Alta (7.3)	0.34%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	9/12/2025	7/10/2026	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14324	Modificada	Crítica (9.8)	0.56%	—	Mozilla Firefox Mozilla Thunderbird	9/12/2025	7/10/2026	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14323	Modificada	Alta (8.8)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	9/12/2025	7/10/2026	Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.