Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2677▼ 656 respecto a la semana anterior

Críticas / altas1264▼ 294 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior

3953 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-4707	Modificada	Alta (7.5)	0.58%	—	Mozilla Firefox	24/3/2026	17/6/2026	Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4706	Modificada	Alta (7.5)	0.45%	—	Mozilla Firefox	24/3/2026	17/6/2026	Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4705	Modificada	Crítica (9.8)	0.63%	—	Mozilla Firefox	24/3/2026	17/6/2026	Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4704	Modificada	Alta (7.5)	0.63%	—	Mozilla Firefox	24/3/2026	17/6/2026	Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4702	Modificada	Crítica (9.8)	0.67%	—	Mozilla Firefox	24/3/2026	17/6/2026	JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4701	Modificada	Crítica (9.8)	0.46%	—	Mozilla Firefox	24/3/2026	17/6/2026	Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4700	Modificada	Crítica (9.8)	0.46%	—	Mozilla Firefox	24/3/2026	15/7/2026	Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4699	Modificada	Alta (7.5)	0.69%	—	Mozilla Firefox	24/3/2026	15/7/2026	Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4698	Modificada	Crítica (9.8)	0.76%	—	Mozilla Firefox	24/3/2026	15/7/2026	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4697	Modificada	Alta (7.5)	0.69%	—	Mozilla Firefox	24/3/2026	15/7/2026	Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4696	Modificada	Crítica (9.8)	0.48%	—	Mozilla Firefox	24/3/2026	15/7/2026	Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4695	Modificada	Alta (7.5)	0.69%	—	Mozilla Firefox	24/3/2026	15/7/2026	Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4694	Modificada	Alta (7.5)	0.77%	—	Mozilla Firefox Mozilla Thunderbird	24/3/2026	15/7/2026	Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4693	Modificada	Alta (7.5)	0.69%	—	Mozilla Firefox	24/3/2026	15/7/2026	Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4692	Modificada	Crítica (10)	0.49%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	24/3/2026	15/7/2026	Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4691	Modificada	Crítica (9.8)	0.48%	—	Mozilla Firefox	24/3/2026	15/7/2026	Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4690	Modificada	Alta (8.6)	0.77%	—	Mozilla Firefox	24/3/2026	15/7/2026	Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4689	Modificada	Crítica (10)	0.66%	—	Mozilla Firefox Mozilla Thunderbird	24/3/2026	15/7/2026	Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4688	Modificada	Crítica (10)	0.53%	—	Mozilla Firefox	24/3/2026	15/7/2026	Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4687	Modificada	Alta (8.6)	0.54%	—	Mozilla Firefox	24/3/2026	15/7/2026	Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4686	Modificada	Alta (7.5)	0.70%	—	Mozilla Firefox	24/3/2026	15/7/2026	Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4685	Modificada	Alta (7.5)	0.69%	—	Mozilla Firefox	24/3/2026	15/7/2026	Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-4684	Modificada	Alta (7.5)	0.35%	—	Mozilla Firefox	24/3/2026	15/7/2026	Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
CVE-2026-3847	Modificada	Alta (8.8)	0.39%	—	Mozilla Firefox	10/3/2026	17/6/2026	Memory safety bugs present in Firefox 148.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148.0.2.
CVE-2026-3846	Modificada	Media (6.5)	0.17%	—	Mozilla Firefox	10/3/2026	17/6/2026	Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 148.0.2.