Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▼ 485 respecto a la semana anterior

Críticas / altas1305▼ 185 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

3565 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-84126	Analizada	Media (4.3)	0.31%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	3/9/2026	Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84125	Analizada	Media (5.4)	0.29%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84124	Analizada	Media (5.4)	0.17%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84123	Analizada	Alta (8.8)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84122	Analizada	Media (5.4)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84121	Analizada	Crítica (9.6)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84120	Analizada	Media (5.4)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84119	Analizada	Crítica (9.6)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84118	Analizada	Media (5.4)	0.29%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	1/9/2026	2/9/2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
CVE-2026-84117	Analizada	Alta (8.8)	0.35%	—	Mozilla Firefox Mobile	1/9/2026	3/9/2026	Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-81267	Analizada	Media (5.4)	0.26%	—	Mozilla Firefox Mobile	31/8/2026	3/9/2026	A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.
CVE-2026-75874	Modificada	Crítica (10)	0.46%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	1/9/2026	Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-74990	Modificada	Crítica (9.8)	0.71%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	1/9/2026	Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154,…
CVE-2026-74989	Modificada	Crítica (9.8)	0.57%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	1/9/2026	Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Thunderbird 154.
CVE-2026-74988	Modificada	Crítica (9.8)	0.61%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	1/9/2026	Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1,…
CVE-2026-74987	Modificada	Crítica (9.8)	0.71%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	1/9/2026	Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154,…
CVE-2026-74986	Analizada	Crítica (9.1)	0.56%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	25/8/2026	Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74985	Analizada	Crítica (9.8)	0.53%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	25/8/2026	Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74984	Analizada	Media (6.8)	0.28%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	25/8/2026	Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74983	Analizada	Alta (8.1)	0.43%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	19/8/2026	Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74982	Analizada	Alta (7.5)	0.53%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	25/8/2026	Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74981	Analizada	Alta (8.1)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	25/8/2026	Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74980	Analizada	Media (6.5)	0.27%	—	Mozilla Firefox Mobile	18/8/2026	25/8/2026	Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74979	Analizada	Crítica (9.8)	0.53%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	20/8/2026	Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74978	Analizada	Alta (8.1)	0.38%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	25/8/2026	Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.