Mozilla Firefox — свободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox

Вендор: mozilla

График релизов

Релизные элементы

KB	Версия	Билд	Дата доступности
	138.0.4	138.0.4
	138.0.3	138.0.3
	138.0.1	138.0.1
	138.0	138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 18 439

CVE-2026-92019

2 месяца назад

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-92038

2 месяца назад

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-92040

2 месяца назад

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-92050

2 месяца назад

Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-92020

2 месяца назад

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-92042

2 месяца назад

Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-92036

2 месяца назад

Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-92058

2 месяца назад

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-92063

2 месяца назад

Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

CVSS3: 3.4

EPSS: Низкий

CVE-2026-92048

2 месяца назад

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

CVSS3: 6.1

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано 1
CVE-2026-92019 Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.	CVSS3: 7.5	0% Низкий	2 месяца назад
CVE-2026-92038 Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CVSS3: 7.5	0% Низкий	2 месяца назад
CVE-2026-92040 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CVSS3: 6.1	0% Низкий	2 месяца назад
CVE-2026-92050 Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CVSS3: 6.1	0% Низкий	2 месяца назад
CVE-2026-92020 Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.	CVSS3: 7.5	0% Низкий	2 месяца назад
CVE-2026-92042 Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CVSS3: 6.1	0% Низкий	2 месяца назад
CVE-2026-92036 Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CVSS3: 7.5	1% Низкий	2 месяца назад
CVE-2026-92058 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CVSS3: 6.1	0% Низкий	2 месяца назад
CVE-2026-92063 Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CVSS3: 3.4	0% Низкий	2 месяца назад
CVE-2026-92048 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CVSS3: 6.1	0% Низкий	2 месяца назад

Уязвимостей на страницу