Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior

Críticas / altas1458▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

3953 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-100760	En análisis	Crítica (9.6)	0.32%	—	Mozilla Firefox^AI	29/9/2026	1/10/2026	Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100759	En análisis	Alta (8.1)	0.33%	—	Mozilla Firefox^AI Mozilla Firefox ESR^AI	29/9/2026	1/10/2026	Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100758	En análisis	Crítica (9.6)	0.32%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100757	En análisis	Alta (8.8)	0.34%	—	Mozilla Firefox^AI Mozilla Firefox ESR^AI	29/9/2026	30/9/2026	Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100756	Analizada	Alta (8.1)	0.33%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-92240	Analizada	Crítica (9.1)	0.63%	—	Mozilla Thunderbird	15/9/2026	24/9/2026	A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92239	Analizada	Alta (8.1)	0.41%	—	Mozilla Thunderbird	15/9/2026	24/9/2026	A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92238	Analizada	Crítica (9.8)	0.54%	—	Mozilla Thunderbird	15/9/2026	24/9/2026	A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92079	Analizada	Crítica (9.1)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92078	Analizada	Media (6.5)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92077	Analizada	Media (6.5)	0.27%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Denial-of-service in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92076	Analizada	Alta (8.8)	0.11%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92075	Analizada	Crítica (9.1)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92074	Analizada	Alta (8.8)	0.11%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92073	Analizada	Alta (8.8)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92072	Analizada	Alta (8)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92071	Analizada	Crítica (9.6)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92070	Analizada	Media (4.3)	0.18%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Information disclosure in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92069	Analizada	Media (5.4)	0.18%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Spoofing issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92068	Analizada	Media (5.4)	0.10%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92067	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92066	Analizada	Crítica (9.8)	0.55%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92065	Analizada	Alta (8.8)	0.10%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92064	Analizada	Alta (8.8)	0.10%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92063	Analizada	Media (6.5)	0.38%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.