Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2738▼ 488 respecto a la semana anterior

Críticas / altas1301▼ 189 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

2030 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-74960	Analizada	Alta (8.1)	0.22%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	24/8/2026	Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74959	Analizada	Crítica (9.1)	0.48%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	24/8/2026	Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74958	Analizada	Alta (7.5)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	19/8/2026	Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74957	Analizada	Alta (8.1)	0.43%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	24/8/2026	Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74956	Analizada	Crítica (9.1)	0.50%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	19/8/2026	Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74955	Analizada	Alta (8.8)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74954	Analizada	Alta (7.5)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	19/8/2026	Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74953	Analizada	Alta (8.8)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74952	Modificada	Alta (8.8)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	1/9/2026	Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2.
CVE-2026-74950	Analizada	Alta (8.8)	0.41%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74949	Modificada	Alta (8.8)	0.47%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	1/9/2026	Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74948	Analizada	Media (6.5)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	24/8/2026	Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74947	Analizada	Alta (8.8)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74946	Analizada	Alta (8.8)	0.49%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74945	Analizada	Media (6.5)	0.44%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	18/8/2026	24/8/2026	Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74944	Modificada	Crítica (9.8)	0.59%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74943	Modificada	Crítica (9.8)	0.61%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74942	Analizada	Alta (8.8)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74941	Analizada	Alta (8.8)	0.48%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74940	Modificada	Crítica (9.8)	0.61%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74939	Analizada	Alta (8.8)	0.45%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74938	Analizada	Crítica (9.1)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	19/8/2026	Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74937	Analizada	Alta (8.8)	0.44%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	19/8/2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74936	Modificada	Crítica (9.8)	0.59%	💥 PoC	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74935	Analizada	Alta (8.8)	0.45%	—	Mozilla Firefox Mozilla Thunderbird	18/8/2026	21/8/2026	Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.