Mozilla Firefox — свободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox

Вендор: mozilla

График релизов

Релизные элементы

KB	Версия	Билд	Дата доступности
	138.0.4	138.0.4
	138.0.3	138.0.3
	138.0.1	138.0.1
	138.0	138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 17 673

CVE-2026-74937

30 дней назад

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVSS3: 8.8

EPSS: Низкий

CVE-2026-74936

30 дней назад

Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...

CVSS3: 9.8

EPSS: Низкий

CVE-2026-74936

30 дней назад

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVSS3: 9.8

EPSS: Низкий

CVE-2026-74935

30 дней назад

Privilege escalation in the DOM: Networking component. This vulnerabil ...

CVSS3: 8.8

EPSS: Низкий

CVE-2026-74935

30 дней назад

Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVSS3: 8.8

EPSS: Низкий

CVE-2026-74934

30 дней назад

Site isolation issue in the Graphics: CanvasWebGL component. This vuln ...

CVSS3: 7.5

EPSS: Низкий

CVE-2026-74934

30 дней назад

Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-74957

30 дней назад

Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVSS3: 8.1

EPSS: Низкий

CVE-2026-74959

30 дней назад

Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVSS3: 9.1

EPSS: Низкий

CVE-2026-74949

30 дней назад

Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

CVSS3: 8.8

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано 1
CVE-2026-74937 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CVSS3: 8.8	0% Низкий	30 дней назад
CVE-2026-74936 Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...	CVSS3: 9.8	0% Низкий	30 дней назад
CVE-2026-74936 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.	CVSS3: 9.8	0% Низкий	30 дней назад
CVE-2026-74935 Privilege escalation in the DOM: Networking component. This vulnerabil ...	CVSS3: 8.8	0% Низкий	30 дней назад
CVE-2026-74935 Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.	CVSS3: 8.8	0% Низкий	30 дней назад
CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL component. This vuln ...	CVSS3: 7.5	0% Низкий	30 дней назад
CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.	CVSS3: 7.5	0% Низкий	30 дней назад
CVE-2026-74957 Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.	CVSS3: 8.1	0% Низкий	30 дней назад
CVE-2026-74959 Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.	CVSS3: 9.1	0% Низкий	30 дней назад
CVE-2026-74949 Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.	CVSS3: 8.8	0% Низкий	30 дней назад

Уязвимостей на страницу