Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 673
GHSA-5g9x-cffv-ccj8
Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.
GHSA-jm34-3r5q-pm6j
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.
GHSA-597r-7m7p-2q8x
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, and Firefox ESR 153.2.
GHSA-26h4-6rvj-cph2
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2.
GHSA-668r-xjh4-3hm3
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, and Firefox ESR 153.2.
GHSA-9q9x-3h5p-qv27
Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2.
CVE-2026-84145
Internally found bugs present in Thunderbird 154, Thunderbird ESR 153. ...
CVE-2026-84145
Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-84144
Internally found bugs present in Thunderbird 154 and Thunderbird ESR 1 ...
CVE-2026-84144
Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-5g9x-cffv-ccj8 Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2. | CVSS3: 9.6 | 0% Низкий | 15 дней назад |
| GHSA-jm34-3r5q-pm6j Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2. | CVSS3: 9.6 | 0% Низкий | 15 дней назад |
| GHSA-597r-7m7p-2q8x Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, and Firefox ESR 153.2. | CVSS3: 5.4 | 0% Низкий | 15 дней назад |
| GHSA-26h4-6rvj-cph2 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | CVSS3: 5.4 | 0% Низкий | 15 дней назад |
| GHSA-668r-xjh4-3hm3 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, and Firefox ESR 153.2. | CVSS3: 5.4 | 0% Низкий | 15 дней назад |
| GHSA-9q9x-3h5p-qv27 Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2. | CVSS3: 8.8 | 0% Низкий | 15 дней назад |
| CVE-2026-84145 Internally found bugs present in Thunderbird 154, Thunderbird ESR 153. ... | CVSS3: 7.5 | 0% Низкий | 15 дней назад |
 | CVE-2026-84145 Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2. | CVSS3: 7.5 | 0% Низкий | 15 дней назад |
| CVE-2026-84144 Internally found bugs present in Thunderbird 154 and Thunderbird ESR 1 ... | CVSS3: 7.5 | 0% Низкий | 15 дней назад |
| CVE-2026-84144 Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. | CVSS3: 7.5 | 0% Низкий | 15 дней назад |
Уязвимостей на страницу