p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de firefox-esr · Página 12

Vulnerabilidades publicadas para firefox-esr en los últimos 30 días: 268. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 1358

  2. CVE-2026-100814

    Alta · CVSS 8.8EPSS 0,24%Corrección disponible

    Incorrect boundary conditions in the JavaScript Engine: JIT component

    Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  4. CVE-2026-100811

    Crítica · CVSS 9.6EPSS 0,27%Corrección disponible

    Sandbox escape due to use-after-free in the DOM: Core & HTML component

    Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  7. CVE-2026-100807

    Alta · CVSS 8.8EPSS 0,23%Corrección disponible

    Privilege escalation in the DOM: Service Workers component

    Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  9. CVE-2026-100803

    Alta · CVSS 8.1EPSS 0,17%Corrección disponible

    Same-origin policy bypass in the WebExtensions component

    Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  10. CVE-2026-100801

    Alta · CVSS 8.8EPSS 0,23%Corrección disponible

    Privilege escalation in the DLL Services component

    Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 159, Firefox ESR 153.6, Thunderbird 159, Thunderbird 153.6, Firefox 157, and Firefox ESR 140.17.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  11. CVE-2026-100800

    Crítica · CVSS 9.6EPSS 0,29%Corrección disponible

    Sandbox escape due to use-after-free in the Disability Access APIs component

    Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  13. CVE-2026-100797

    Alta · CVSS 8.8EPSS 0,25%Corrección disponible

    Privilege escalation due to use-after-free in the Graphics: WebRender component

    Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  14. CVE-2026-96869

    Media · CVSS 4.3EPSS 0,24%Corrección disponible

    Information disclosure in the Networking component

    Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  15. CVE-2026-100794

    Crítica · CVSS 9.6EPSS 0,32%Corrección disponible

    Sandbox escape due to incorrect boundary conditions in the Internationalization component

    Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  16. CVE-2026-100792

    Alta · CVSS 7.1EPSS 0,26%Corrección disponible

    JIT miscompilation in the JavaScript: WebAssembly component

    JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  17. CVE-2026-100791

    Alta · CVSS 8.8EPSS 0,4%Corrección disponible

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  19. CVE-2026-100789

    Alta · CVSS 8.8EPSS 0,32%Corrección disponible

    Use-after-free in the Graphics: Canvas2D component

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  20. CVE-2026-100788

    Crítica · CVSS 9.8EPSS 0,41%Corrección disponible

    Invalid pointer in the JavaScript: WebAssembly component

    Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    firefox-esrSistemas operativos
    • Actualiza a 153.4.0esr-1~deb13u1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →