Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 691
GHSA-x8jx-9xwq-xwq6
Use-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 148 and Firefox ESR < 140.8.
GHSA-v49m-r4w3-2p5x
Integer overflow in the JavaScript: Standard Library component. This vulnerability affects Firefox < 148 and Firefox ESR < 140.8.
GHSA-qmr7-46p8-4c5r
Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.
GHSA-3cg8-wjp5-4rm6
Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.
GHSA-g5w7-69g8-vcwp
Sandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8.
GHSA-59x3-pvmj-2pw2
Use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 148 and Firefox ESR < 140.8.
SUSE-SU-2026:0611-1
Security update for MozillaFirefox
CVE-2026-2807
Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of ...
CVE-2026-2807
Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2806
Uninitialized memory in the Graphics: Text component. This vulnerabili ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-x8jx-9xwq-xwq6 Use-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 148 and Firefox ESR < 140.8. | CVSS3: 9.8 | 0% Низкий | 7 месяцев назад |
| GHSA-v49m-r4w3-2p5x Integer overflow in the JavaScript: Standard Library component. This vulnerability affects Firefox < 148 and Firefox ESR < 140.8. | CVSS3: 9.8 | 1% Низкий | 7 месяцев назад |
| GHSA-qmr7-46p8-4c5r Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8. | CVSS3: 9.8 | 0% Низкий | 7 месяцев назад |
| GHSA-3cg8-wjp5-4rm6 Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8. | CVSS3: 9.8 | 0% Низкий | 7 месяцев назад |
| GHSA-g5w7-69g8-vcwp Sandbox escape in the Graphics: WebRender component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8. | CVSS3: 10 | 0% Низкий | 7 месяцев назад |
| GHSA-59x3-pvmj-2pw2 Use-after-free in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 148 and Firefox ESR < 140.8. | CVSS3: 9.8 | 0% Низкий | 7 месяцев назад |
 | SUSE-SU-2026:0611-1 Security update for MozillaFirefox | 1% Низкий | 7 месяцев назад | |
| CVE-2026-2807 Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of ... | CVSS3: 9.8 | 0% Низкий | 7 месяцев назад |
 | CVE-2026-2807 Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148 and Thunderbird 148. | CVSS3: 9.8 | 0% Низкий | 7 месяцев назад |
| CVE-2026-2806 Uninitialized memory in the Graphics: Text component. This vulnerabili ... | CVSS3: 9.1 | 0% Низкий | 7 месяцев назад |
Уязвимостей на страницу