Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior

Críticas / altas1273▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior

2189 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-84143	Modificada	Crítica (9.8)	0.38%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155,…
CVE-2026-84142	Modificada	Crítica (9.8)	0.56%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84141	Modificada	Crítica (9.8)	0.63%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84140	Modificada	Crítica (9.8)	0.29%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84139	Modificada	Media (6.1)	0.34%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84138	Modificada	Media (6.5)	0.37%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84137	Modificada	Media (4.3)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84136	Modificada	Media (6.1)	0.38%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84134	Analizada	Crítica (9.8)	0.57%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84133	Analizada	Crítica (9.8)	0.29%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84132	Analizada	Alta (7.5)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84131	Analizada	Alta (8.8)	0.34%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84130	Analizada	Alta (7.5)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84129	Analizada	Crítica (9.8)	0.29%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84128	Analizada	Alta (8.8)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84126	Analizada	Media (4.3)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84125	Analizada	Media (5.4)	0.29%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84124	Analizada	Media (5.4)	0.17%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84123	Analizada	Alta (8.8)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84122	Analizada	Media (5.4)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84121	Analizada	Crítica (9.6)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84120	Analizada	Media (5.4)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84119	Analizada	Crítica (9.6)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84118	Analizada	Media (5.4)	0.29%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2023-42179	Aplazada	Crítica (9.8)	0.36%	—	Bird Home Automation Gmbh D1101v-f^AI	26/8/2026	8/9/2026	Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process.