Mozilla Firefox — свободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox

Вендор: mozilla

График релизов

Релизные элементы

KB	Версия	Билд	Дата доступности
	138.0.4	138.0.4
	138.0.3	138.0.3
	138.0.1	138.0.1
	138.0	138.0

Показывать по

Недавние уязвимости Mozilla Firefox

Количество 17 673

CVE-2026-16357

около 2 месяцев назад

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-16356

около 2 месяцев назад

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-16355

около 2 месяцев назад

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-16369

около 2 месяцев назад

Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-16367

около 2 месяцев назад

Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-16368

около 2 месяцев назад

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-16354

около 2 месяцев назад

Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-16353

около 2 месяцев назад

Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-16366

около 2 месяцев назад

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 7.5

EPSS: Низкий

CVE-2026-16365

около 2 месяцев назад

Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

CVSS3: 7.5

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано 1
CVE-2026-16357 Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 7.5	0% Низкий	около 2 месяцев назад
CVE-2026-16356 Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 7.5	0% Низкий	около 2 месяцев назад
CVE-2026-16355 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 7.5	0% Низкий	около 2 месяцев назад
CVE-2026-16369 Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 7.5	0% Низкий	около 2 месяцев назад
CVE-2026-16367 Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 7.5	0% Низкий	около 2 месяцев назад
CVE-2026-16368 Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 7.5	0% Низкий	около 2 месяцев назад
CVE-2026-16354 Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 7.5	0% Низкий	около 2 месяцев назад
CVE-2026-16353 Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CVSS3: 7.5	1% Низкий	около 2 месяцев назад
CVE-2026-16366 Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 7.5	0% Низкий	около 2 месяцев назад
CVE-2026-16365 Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CVSS3: 7.5	0% Низкий	около 2 месяцев назад

Уязвимостей на страницу