Mozilla Firefox — свободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox

Вендор: mozilla

График релизов

Релизные элементы

KB	Версия	Билд	Дата доступности
	138.0.4	138.0.4
	138.0.3	138.0.3
	138.0.1	138.0.1
	138.0	138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 17 673

CVE-2026-16389

около 2 месяцев назад

Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16388

около 2 месяцев назад

Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16387

около 2 месяцев назад

Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16386

около 2 месяцев назад

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16385

около 2 месяцев назад

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16384

около 2 месяцев назад

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16383

около 2 месяцев назад

Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16382

около 2 месяцев назад

Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16381

около 2 месяцев назад

Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16380

около 2 месяцев назад

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 6.1

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано 1
CVE-2026-16389 Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 6.1	1% Низкий	около 2 месяцев назад
CVE-2026-16388 Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16387 Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16386 Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16385 Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16384 Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16383 Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16382 Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16381 Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16380 Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад

Уязвимостей на страницу