Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Количество 15 501
CVE-2026-0888
Information disclosure in the XML component. This vulnerability affects Firefox < 147 and Thunderbird < 147.
CVE-2026-0887
Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability affects Firefox < 147, Firefox ESR < 140.7, Thunderbird < 147, and Thunderbird < 140.7.
CVE-2026-0882
Use-after-free in the IPC component. This vulnerability affects Firefox < 147, Firefox ESR < 115.32, Firefox ESR < 140.7, Thunderbird < 147, and Thunderbird < 140.7.
CVE-2026-0889
Denial-of-service in the DOM: Service Workers component. This vulnerability affects Firefox < 147 and Thunderbird < 147.
BDU:2026-00524
Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код
BDU:2026-00525
Уязвимость браузеров Mozilla Firefox, Firefox ESR, почтовых клиентов Thunderbird и Thunderbird ESR, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код
GHSA-ff4q-8rgg-cv6g
Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 146.0.1.
GHSA-w3cw-f63h-9g34
Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability affects Firefox for iOS < 144.0.
GHSA-7p9f-x9pw-w3x4
Use-after-free in the Disability Access APIs component. This vulnerability affects Firefox < 146.0.1.
CVE-2025-14861
Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 146.0.1.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2026-0888 Information disclosure in the XML component. This vulnerability affects Firefox < 147 and Thunderbird < 147. | CVSS3: 5.3 | 0% Низкий | 22 дня назад |
| CVE-2026-0887 Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability affects Firefox < 147, Firefox ESR < 140.7, Thunderbird < 147, and Thunderbird < 140.7. | CVSS3: 4.3 | 0% Низкий | 22 дня назад |
| CVE-2026-0882 Use-after-free in the IPC component. This vulnerability affects Firefox < 147, Firefox ESR < 115.32, Firefox ESR < 140.7, Thunderbird < 147, and Thunderbird < 140.7. | CVSS3: 8.8 | 0% Низкий | 22 дня назад |
| CVE-2026-0889 Denial-of-service in the DOM: Service Workers component. This vulnerability affects Firefox < 147 and Thunderbird < 147. | CVSS3: 7.5 | 0% Низкий | 22 дня назад |
 | BDU:2026-00524 Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 0% Низкий | 22 дня назад |
| BDU:2026-00525 Уязвимость браузеров Mozilla Firefox, Firefox ESR, почтовых клиентов Thunderbird и Thunderbird ESR, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.1 | 0% Низкий | 22 дня назад |
| GHSA-ff4q-8rgg-cv6g Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 146.0.1. | CVSS3: 8.8 | 0% Низкий | около 2 месяцев назад |
| GHSA-w3cw-f63h-9g34 Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability affects Firefox for iOS < 144.0. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
| GHSA-7p9f-x9pw-w3x4 Use-after-free in the Disability Access APIs component. This vulnerability affects Firefox < 146.0.1. | CVSS3: 9.8 | 0% Низкий | около 2 месяцев назад |
 | CVE-2025-14861 Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 146.0.1. | CVSS3: 8.8 | 0% Низкий | около 2 месяцев назад |
Уязвимостей на страницу