Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

3953 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-92062	Analizada	Alta (8.8)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92061	Analizada	Crítica (9.8)	0.55%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92060	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92059	Analizada	Crítica (9.3)	0.11%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92058	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92057	Analizada	Crítica (9.1)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92056	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92055	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92054	Analizada	Alta (8.8)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92053	Analizada	Alta (8.8)	0.25%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92052	Analizada	Alta (8.8)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92051	Analizada	Crítica (9.1)	0.53%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92050	Analizada	Crítica (9.1)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92049	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92048	Analizada	Crítica (9)	0.28%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92047	Analizada	Alta (8.8)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92046	Analizada	Alta (8.8)	0.29%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92045	Analizada	Crítica (9.6)	0.30%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92044	Analizada	Alta (7.5)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92043	Analizada	Alta (8.8)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92042	Analizada	Alta (7.5)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92041	Analizada	Crítica (9.1)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92040	Analizada	Alta (8.8)	0.42%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92039	Analizada	Media (6.3)	0.20%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92038	Analizada	Crítica (9.1)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	15/9/2026	5/10/2026	Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.