Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2819→ sin cambios respecto a la semana anterior

Críticas / altas1469▲ 239 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)83▼ 429 respecto a la semana anterior

3951 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-103500	Pendiente de análisis	Sin puntuar	0.19%	—	Mozilla Thunderbird^AI	30/9/2026	30/9/2026	An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4.
CVE-2026-96869	Pendiente de análisis	Media (4.3)	0.21%	—	Mozilla Firefox^AI Mozilla Firefox ESR^AI	29/9/2026	30/9/2026	Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100832	En análisis	Alta (8.8)	0.26%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100831	En análisis	Alta (8.8)	0.25%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100830	En análisis	Alta (8.1)	0.15%	—	Mozilla Firefox^AI	29/9/2026	1/10/2026	Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100829	En análisis	Crítica (9.6)	0.15%	—	Mozilla Firefox^AI	29/9/2026	1/10/2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100828	En análisis	Crítica (9.6)	0.15%	—	Mozilla Firefox^AI	29/9/2026	1/10/2026	Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100826	En análisis	Media (6.5)	0.23%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100825	En análisis	Alta (8.8)	0.25%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100824	En análisis	Alta (8.8)	0.24%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100823	Pendiente de análisis	Media (5.4)	0.16%	—	Mozilla Firefox Android^AI	29/9/2026	1/10/2026	Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157.
CVE-2026-100822	En análisis	Media (5.4)	0.24%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100821	En análisis	Media (4.7)	0.16%	—	Mozilla Firefox^AI Mozilla Firefox ESR^AI	29/9/2026	1/10/2026	Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100820	Pendiente de análisis	Alta (8.8)	0.25%	—	Mozilla Firefox^AI Mozilla Firefox ESR^AI	29/9/2026	30/9/2026	Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100819	Pendiente de análisis	Crítica (9.6)	0.28%	—	Mozilla Firefox^AI Mozilla Firefox ESR^AI	29/9/2026	30/9/2026	Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100818	Pendiente de análisis	Crítica (9.6)	0.28%	—	Mozilla Firefox^AI Mozilla Firefox ESR^AI	29/9/2026	30/9/2026	Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100817	Pendiente de análisis	Media (5.4)	0.15%	—	Mozilla Firefox^AI	29/9/2026	1/10/2026	Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100816	Pendiente de análisis	Alta (8.1)	0.15%	—	Mozilla Firefox^AI	29/9/2026	1/10/2026	Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100815	Pendiente de análisis	Alta (8.8)	0.25%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100814	Pendiente de análisis	Alta (8.8)	0.26%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100813	Pendiente de análisis	Alta (8.8)	0.25%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100812	Pendiente de análisis	Media (6.5)	0.29%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100811	Pendiente de análisis	Crítica (9.6)	0.28%	—	Mozilla Firefox^AI	29/9/2026	30/9/2026	Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100810	Pendiente de análisis	Crítica (9.8)	0.15%	—	Mozilla Firefox^AI	29/9/2026	1/10/2026	Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100809	Pendiente de análisis	Alta (8.1)	0.16%	—	Mozilla Firefox^AI	29/9/2026	1/10/2026	Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.