Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 304
CVE-2025-49709
Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4.
CVE-2025-49709
Certain canvas operations could have lead to memory corruption. This v ...
CVE-2025-49710
An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4.
CVE-2025-49709
Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4.
BDU:2025-07759
Уязвимость компонента OrderedHashTable браузеров Mozilla Firefox, позволяющая нарушителю выполнить произвольный код
BDU:2025-07758
Уязвимость компонента Canvas Handler браузера Mozilla Firefox, позволяющая нарушителю выполнить произвольный код
BDU:2025-07582
Уязвимость компонента HTTP Header Handler браузеров Mozilla Firefox, Firefox ESR, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)
GHSA-h36q-jch3-f9mw
Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 139.
GHSA-xg8q-ggjx-6hx2
A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11.
GHSA-qjw8-8452-9587
Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 128.11.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2025-49709 Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4. | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
| CVE-2025-49709 Certain canvas operations could have lead to memory corruption. This v ... | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
 | CVE-2025-49710 An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4. | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
| CVE-2025-49709 Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4. | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
 | BDU:2025-07759 Уязвимость компонента OrderedHashTable браузеров Mozilla Firefox, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
| BDU:2025-07758 Уязвимость компонента Canvas Handler браузера Mozilla Firefox, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
| BDU:2025-07582 Уязвимость компонента HTTP Header Handler браузеров Mozilla Firefox, Firefox ESR, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS) | CVSS3: 6.1 | 0% Низкий | около 1 года назад |
| GHSA-h36q-jch3-f9mw Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 139. | CVSS3: 7.3 | 0% Низкий | около 1 года назад |
| GHSA-xg8q-ggjx-6hx2 A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11. | CVSS3: 5.4 | 0% Низкий | около 1 года назад |
| GHSA-qjw8-8452-9587 Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 128.11. | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу