Mozilla Firefox — свободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox

Вендор: mozilla

График релизов

Релизные элементы

KB	Версия	Билд	Дата доступности
	138.0.4	138.0.4
	138.0.3	138.0.3
	138.0.1	138.0.1
	138.0	138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 17 673

CVE-2026-16358

около 2 месяцев назад

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16379

около 2 месяцев назад

Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16378

около 2 месяцев назад

Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16377

около 2 месяцев назад

Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16376

около 2 месяцев назад

Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16375

около 2 месяцев назад

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16374

около 2 месяцев назад

Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16371

около 2 месяцев назад

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16372

около 2 месяцев назад

Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 6.1

EPSS: Низкий

CVE-2026-16370

около 2 месяцев назад

Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 6.1

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано 1
CVE-2026-16358 Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16379 Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16378 Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16377 Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16376 Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16375 Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16374 Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16371 Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16372 Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад
CVE-2026-16370 Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 6.1	0% Низкий	около 2 месяцев назад

Уязвимостей на страницу