Mozilla Firefox — свободный браузер на движке Gecko
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 138.0.4 | 138.0.4 | ||
| 138.0.3 | 138.0.3 | ||
| 138.0.1 | 138.0.1 | ||
| 138.0 | 138.0 |
Показывать по
Количество 17 673
GHSA-wpxg-v53p-m79m
Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11.
GHSA-p3qw-gcrh-3pq6
Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151.
GHSA-m49g-cq5x-4jmc
Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11.
GHSA-jvw5-v42q-rpwc
Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.
GHSA-j9gx-gpjh-cwc4
Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151.
GHSA-6fhv-h367-4jc4
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, and Firefox ESR 140.11.
CVE-2026-8975
Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 a ...
CVE-2026-8975
Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8974
Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some ...
CVE-2026-8974
Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-wpxg-v53p-m79m Integer overflow in the Widget: Win32 component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| GHSA-p3qw-gcrh-3pq6 Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| GHSA-m49g-cq5x-4jmc Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151 and Firefox ESR 140.11. | CVSS3: 9.3 | 0% Низкий | 4 месяца назад |
| GHSA-jvw5-v42q-rpwc Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| GHSA-j9gx-gpjh-cwc4 Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151. | CVSS3: 9.1 | 0% Низкий | 4 месяца назад |
| GHSA-6fhv-h367-4jc4 Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, and Firefox ESR 140.11. | CVSS3: 7.3 | 0% Низкий | 4 месяца назад |
| CVE-2026-8975 Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 a ... | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-8975 Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
| CVE-2026-8974 Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some ... | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
| CVE-2026-8974 Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу