Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior

Críticas / altas1293▼ 208 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior

2087 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-92045	Analizada	Crítica (9.6)	0.30%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92044	Analizada	Alta (7.5)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92043	Analizada	Alta (8.8)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92042	Analizada	Alta (7.5)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92041	Analizada	Crítica (9.1)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92040	Analizada	Alta (8.8)	0.42%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92039	Analizada	Media (6.3)	0.20%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92038	Analizada	Crítica (9.1)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92037	Analizada	Crítica (9.8)	0.55%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92036	Analizada	Crítica (9.8)	0.55%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92035	Analizada	Crítica (9.6)	0.33%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-92034	Analizada	Crítica (9.1)	0.27%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92032	Analizada	Crítica (9.6)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92031	Analizada	Media (6.5)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92030	Analizada	Media (5.4)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92029	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92028	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92027	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92026	Analizada	Alta (8.8)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92025	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92024	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92023	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92022	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92021	Analizada	Alta (8.8)	0.28%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.
CVE-2026-92020	Analizada	Alta (8.8)	0.26%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	6/10/2026	Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.