Mozilla Firefox — свободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox

Вендор: mozilla

График релизов

Релизные элементы

KB	Версия	Билд	Дата доступности
	138.0.4	138.0.4
	138.0.3	138.0.3
	138.0.1	138.0.1
	138.0	138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 17 673

CVE-2026-74977

около 1 месяца назад

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVSS3: 3.4

EPSS: Низкий

CVE-2026-74978

около 1 месяца назад

Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVSS3: 3.4

EPSS: Низкий

CVE-2026-74970

около 1 месяца назад

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-74968

около 1 месяца назад

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-74961

около 1 месяца назад

Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-74966

около 1 месяца назад

Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-74956

около 1 месяца назад

Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-74958

около 1 месяца назад

Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-74955

около 1 месяца назад

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-74954

около 1 месяца назад

Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVSS3: 6.1

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано 1
CVE-2026-74977 Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CVSS3: 3.4	0% Низкий	около 1 месяца назад
CVE-2026-74978 Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CVSS3: 3.4	0% Низкий	около 1 месяца назад
CVE-2026-74970 Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CVSS3: 6.1	0% Низкий	около 1 месяца назад
CVE-2026-74968 Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CVSS3: 6.1	0% Низкий	около 1 месяца назад
CVE-2026-74961 Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CVSS3: 6.1	0% Низкий	около 1 месяца назад
CVE-2026-74966 Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CVSS3: 6.1	0% Низкий	около 1 месяца назад
CVE-2026-74956 Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CVSS3: 6.1	0% Низкий	около 1 месяца назад
CVE-2026-74958 Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CVSS3: 6.1	0% Низкий	около 1 месяца назад
CVE-2026-74955 Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CVSS3: 6.1	0% Низкий	около 1 месяца назад
CVE-2026-74954 Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CVSS3: 6.1	0% Низкий	около 1 месяца назад

Уязвимостей на страницу