Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 296
GHSA-hrqc-vwff-62mj
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151.
GHSA-c3qv-mh67-fpxw
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, and Firefox ESR 140.11.
GHSA-gm4c-ph85-6chj
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11.
GHSA-m49g-cq5x-4jmc
Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11.
GHSA-jvw5-v42q-rpwc
Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.
GHSA-j9gx-gpjh-cwc4
Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151.
GHSA-p3qw-gcrh-3pq6
Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151.
GHSA-6fhv-h367-4jc4
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, and Firefox ESR 140.11.
CVE-2026-8975
Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8975
Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 a ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-hrqc-vwff-62mj Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
| GHSA-c3qv-mh67-fpxw Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, and Firefox ESR 140.11. | CVSS3: 9.6 | 1% Низкий | 3 месяца назад |
| GHSA-gm4c-ph85-6chj Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11. | CVSS3: 8.6 | 0% Низкий | 3 месяца назад |
| GHSA-m49g-cq5x-4jmc Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11. | CVSS3: 9.3 | 0% Низкий | 3 месяца назад |
| GHSA-jvw5-v42q-rpwc Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151. | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| GHSA-j9gx-gpjh-cwc4 Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151. | CVSS3: 9.1 | 0% Низкий | 3 месяца назад |
| GHSA-p3qw-gcrh-3pq6 Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
| GHSA-6fhv-h367-4jc4 Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, and Firefox ESR 140.11. | CVSS3: 7.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-8975 Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-8975 Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 a ... | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
Уязвимостей на страницу