Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 18 439
CVE-2026-106016
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.
CVE-2026-106016
Mitigation bypass in the File Handling component. This vulnerability w ...
CVE-2026-106016
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.
CVE-2026-106016
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.
GHSA-chh8-pxv3-95vg
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1.
CVE-2026-100762
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100803
Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100808
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100793
JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
CVE-2026-100813
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2026-106016 Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158. | CVSS3: 9.8 | 0% Низкий | около 1 месяца назад |
| CVE-2026-106016 Mitigation bypass in the File Handling component. This vulnerability w ... | CVSS3: 9.8 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-106016 Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158. | CVSS3: 9.8 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-106016 Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158. | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
| GHSA-chh8-pxv3-95vg Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1. | CVSS3: 9.8 | 0% Низкий | около 1 месяца назад |
| CVE-2026-100762 Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | CVSS3: 9.6 | 0% Низкий | около 1 месяца назад |
| CVE-2026-100803 Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | CVSS3: 8.1 | 0% Низкий | около 1 месяца назад |
| CVE-2026-100808 Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| CVE-2026-100793 JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
| CVE-2026-100813 Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу