Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 296
CVE-2026-15718
We are aware that exploit code for this is public however we are not a ...
CVE-2026-15718
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13.
CVE-2026-15719
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.
CVE-2026-15719
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.
CVE-2026-15718
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13.
BDU:2026-10081
Уязвимость компонента DOM: Navigation браузера Mozilla Firefox, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации
BDU:2026-10082
Уязвимость компонента JavaScript: WebAssembly браузера Mozilla Firefox, позволяющая нарушителю раскрыть защищаемую информацию
GHSA-66fv-p34j-fwgr
A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3.
CVE-2026-13356
A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3.
GHSA-m5xh-h67j-5r2q
Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152.0.4.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2026-15718 We are aware that exploit code for this is public however we are not a ... | CVSS3: 4.3 | 0% Низкий | 18 дней назад |
 | CVE-2026-15718 We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13. | CVSS3: 4.3 | 0% Низкий | 18 дней назад |
| CVE-2026-15719 We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13. | CVSS3: 5.4 | 0% Низкий | 18 дней назад |
 | CVE-2026-15719 We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13. | CVSS3: 8.8 | 0% Низкий | 18 дней назад |
| CVE-2026-15718 We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13. | CVSS3: 8.8 | 0% Низкий | 18 дней назад |
 | BDU:2026-10081 Уязвимость компонента DOM: Navigation браузера Mozilla Firefox, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации | CVSS3: 5.4 | 0% Низкий | 19 дней назад |
| BDU:2026-10082 Уязвимость компонента JavaScript: WebAssembly браузера Mozilla Firefox, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 4.3 | 0% Низкий | 19 дней назад |
| GHSA-66fv-p34j-fwgr A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3. | CVSS3: 6.3 | 0% Низкий | 26 дней назад |
 | CVE-2026-13356 A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3. | CVSS3: 6.3 | 0% Низкий | 26 дней назад |
| GHSA-m5xh-h67j-5r2q Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152.0.4. | CVSS3: 9.8 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу