Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2619▼ 461 respecto a la semana anterior

Críticas / altas1277▼ 72 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)235▼ 274 respecto a la semana anterior

2189 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-103500	En análisis	Sin puntuar	0.21%	—	Mozilla Thunderbird^AI	30/9/2026	30/9/2026	An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4.
CVE-2026-96869	Analizada	Media (4.3)	0.20%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100832	Analizada	Alta (8.8)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100820	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100819	Analizada	Crítica (9.6)	0.26%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100818	Analizada	Crítica (9.6)	0.26%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100817	Analizada	Media (5.4)	0.21%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	6/10/2026	Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100816	Analizada	Alta (8.1)	0.15%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100815	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100814	Analizada	Alta (8.8)	0.24%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100813	Analizada	Alta (8.8)	0.23%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100812	Analizada	Media (6.5)	0.27%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100811	Analizada	Crítica (9.6)	0.26%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
CVE-2026-100810	Analizada	Crítica (9.8)	0.38%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100809	Analizada	Alta (8.1)	0.15%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100808	Analizada	Alta (8.8)	0.30%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100787	Analizada	Crítica (9.6)	0.30%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100786	Analizada	Crítica (9.6)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100785	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100784	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100783	Analizada	Media (4.3)	0.28%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100782	Analizada	Alta (8.8)	0.26%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100781	Analizada	Crítica (9.6)	0.33%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100780	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100779	Analizada	Alta (8.8)	0.32%	—	Mozilla Firefox Mozilla Thunderbird	29/9/2026	5/10/2026	Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.