Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior

Críticas / altas1383▼ 38 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior

3565 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-100783	Analizada	Media (4.3)	0.28%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100782	Analizada	Alta (8.8)	0.26%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100781	Analizada	Crítica (9.6)	0.33%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100780	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100779	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100778	Analizada	Crítica (9.6)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100777	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100776	Analizada	Alta (8.8)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100775	Analizada	Crítica (9.6)	0.33%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100774	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100773	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100772	Analizada	Alta (8.8)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100771	Analizada	Alta (8.1)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100770	Analizada	Crítica (9.6)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100769	Analizada	Alta (8.8)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100768	Analizada	Alta (8.8)	0.28%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100767	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100766	En análisis	Media (4.3)	0.27%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100765	En análisis	Alta (8.8)	0.31%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100764	En análisis	Alta (8.8)	0.25%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100763	En análisis	Crítica (9.1)	0.40%	—	Mozilla Firefox^AI	29/9/2026	1/10/2026	Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100762	En análisis	Crítica (9.6)	0.34%	—	Mozilla Firefox^AI Mozilla Firefox ESR^AI	29/9/2026	30/9/2026	Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100761	En análisis	Alta (8.8)	0.24%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100760	En análisis	Crítica (9.6)	0.32%	—	Mozilla Firefox^AI	29/9/2026	1/10/2026	Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100759	En análisis	Alta (8.1)	0.33%	—	Mozilla Firefox^AI Mozilla Firefox ESR^AI	29/9/2026	1/10/2026	Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.