Mozilla Firefox — свободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox

Вендор: mozilla

График релизов

Релизные элементы

KB	Версия	Билд	Дата доступности
	138.0.4	138.0.4
	138.0.3	138.0.3
	138.0.1	138.0.1
	138.0	138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 18 439

CVE-2026-92072

около 2 месяцев назад

Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

CVSS3: 8

EPSS: Низкий

CVE-2026-92047

около 2 месяцев назад

Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

CVSS3: 8.8

EPSS: Низкий

CVE-2026-92037

около 2 месяцев назад

Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

CVSS3: 9.8

EPSS: Низкий

CVE-2026-92039

около 2 месяцев назад

Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

CVSS3: 6.3

EPSS: Низкий

CVE-2026-92007

около 2 месяцев назад

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

CVSS3: 8.8

EPSS: Низкий

CVE-2026-92024

около 2 месяцев назад

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

CVSS3: 8.8

EPSS: Низкий

CVE-2026-92067

около 2 месяцев назад

Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

CVSS3: 8.8

EPSS: Низкий

CVE-2026-92013

около 2 месяцев назад

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

CVSS3: 8.8

EPSS: Низкий

CVE-2026-92021

около 2 месяцев назад

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.

CVSS3: 8.8

EPSS: Низкий

CVE-2026-92010

около 2 месяцев назад

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

CVSS3: 8.8

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано 1
CVE-2026-92072 Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CVSS3: 8	0% Низкий	около 2 месяцев назад
CVE-2026-92047 Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CVSS3: 8.8	0% Низкий	около 2 месяцев назад
CVE-2026-92037 Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CVSS3: 9.8	1% Низкий	около 2 месяцев назад
CVE-2026-92039 Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CVSS3: 6.3	0% Низкий	около 2 месяцев назад
CVE-2026-92007 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.	CVSS3: 8.8	0% Низкий	около 2 месяцев назад
CVE-2026-92024 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.	CVSS3: 8.8	0% Низкий	около 2 месяцев назад
CVE-2026-92067 Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CVSS3: 8.8	0% Низкий	около 2 месяцев назад
CVE-2026-92013 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.	CVSS3: 8.8	0% Низкий	около 2 месяцев назад
CVE-2026-92021 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.	CVSS3: 8.8	0% Низкий	около 2 месяцев назад
CVE-2026-92010 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.	CVSS3: 8.8	0% Низкий	около 2 месяцев назад

Уязвимостей на страницу