Mozilla Firefox — свободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox

Вендор: mozilla

График релизов

Релизные элементы

KB	Версия	Билд	Дата доступности
	138.0.4	138.0.4
	138.0.3	138.0.3
	138.0.1	138.0.1
	138.0	138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 18 439

CVE-2026-100787

около 1 месяца назад

Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-100806

около 1 месяца назад

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-100812

около 1 месяца назад

Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-100816

около 1 месяца назад

Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-100802

около 1 месяца назад

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-100832

около 1 месяца назад

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

CVSS3: 7.5

EPSS: Низкий

GHSA-2q85-hjwm-gmxv

около 1 месяца назад

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 157.

CVSS3: 8.8

EPSS: Низкий

GHSA-27h8-27q2-7ppf

около 1 месяца назад

Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVSS3: 8.1

EPSS: Низкий

GHSA-2x4q-w8v4-vwxh

около 1 месяца назад

Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVSS3: 9.6

EPSS: Низкий

GHSA-29g5-92cf-qhwc

около 1 месяца назад

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157.

CVSS3: 9.6

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано 1
CVE-2026-100787 Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	CVSS3: 7.5	0% Низкий	около 1 месяца назад
CVE-2026-100806 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	CVSS3: 6.1	0% Низкий	около 1 месяца назад
CVE-2026-100812 Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	CVSS3: 6.1	0% Низкий	около 1 месяца назад
CVE-2026-100816 Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	CVSS3: 6.1	0% Низкий	около 1 месяца назад
CVE-2026-100802 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	CVSS3: 6.1	0% Низкий	около 1 месяца назад
CVE-2026-100832 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.	CVSS3: 7.5	0% Низкий	около 1 месяца назад
GHSA-2q85-hjwm-gmxv Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 157.	CVSS3: 8.8	0% Низкий	около 1 месяца назад
GHSA-27h8-27q2-7ppf Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.	CVSS3: 8.1	0% Низкий	около 1 месяца назад
GHSA-2x4q-w8v4-vwxh Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.	CVSS3: 9.6	0% Низкий	около 1 месяца назад
GHSA-29g5-92cf-qhwc Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157.	CVSS3: 9.6	0% Низкий	около 1 месяца назад

Уязвимостей на страницу