p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 19

Vulnerabilities published for Operating systems in the last 30 days: 6875. Listed in the KEV catalogue: 3.

RSS ↗ JSON ↗
Filter vulnerabilities
Operating systems

Vulnerabilities: 159793

  1. CVE-2026-117938

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Layout component

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2026-117937

    Not ratedEPSS 0.19%Fix available

    Invalid pointer in the JavaScript Engine component

    Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2026-117936

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2026-117935

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Bindings (WebIDL) component

    Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2026-117934

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Layout component

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. CVE-2026-117933

    Not ratedEPSS 0.18%Fix available

    Frame poisoning in the CSS Parsing and Computation component

    Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2026-117932

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2026-117931

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Events component

    Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2026-117930

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Bindings (WebIDL) component

    Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2026-117929

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. CVE-2026-117928

    Not ratedEPSS 0.19%Fix available

    Same-origin policy bypass in the CSS Parsing and Computation component

    Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. CVE-2026-117927

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the SVG component

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. CVE-2026-117926

    Not ratedEPSS 0.19%Fix available

    Incorrect boundary conditions in the SVG component

    Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2026-117925

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. CVE-2026-117924

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the XSLT component

    Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. CVE-2026-117923

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Audio/Video component

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2026-117922

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Networking: WebSockets component

    Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. CVE-2026-117921

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the CSS Parsing and Computation component

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. CVE-2026-117920

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the DOM: HTML Parser component

    Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2026-117919

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →