Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2687▼ 562 respecto a la semana anterior

Críticas / altas1259▼ 239 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 239 respecto a la semana anterior

3565 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-92058	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92057	Analizada	Crítica (9.1)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92056	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92055	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92054	Analizada	Alta (8.8)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92053	Analizada	Alta (8.8)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92052	Analizada	Alta (8.8)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92051	Analizada	Crítica (9.1)	0.53%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92050	Analizada	Crítica (9.1)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92049	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92048	Analizada	Crítica (9)	0.28%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92047	Analizada	Alta (8.8)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92046	Analizada	Alta (8.8)	0.29%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92045	Analizada	Crítica (9.6)	0.30%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92044	Analizada	Alta (7.5)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92043	Analizada	Alta (8.8)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92042	Analizada	Alta (7.5)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92041	Analizada	Crítica (9.1)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92040	Analizada	Alta (8.8)	0.42%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92039	Analizada	Media (6.3)	0.20%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92038	Analizada	Crítica (9.1)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92037	Analizada	Crítica (9.8)	0.55%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92036	Analizada	Crítica (9.8)	0.55%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92035	Analizada	Crítica (9.6)	0.33%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-92034	Analizada	Crítica (9.1)	0.27%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.