p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 23

Vulnerabilities published for Operating systems in the last 30 days: 6902. Listed in the KEV catalogue: 3.

RSS ↗ JSON ↗
Filter vulnerabilities
Operating systems

Vulnerabilities: 159819

  1. CVE-2026-117879

    Not ratedEPSS 0.19%Fix available

    Incorrect boundary conditions in the Layout: Tables component

    Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2026-117878

    Not ratedEPSS 0.19%Fix available

    Other issue, use-after-free in the Storage: IndexedDB component

    Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2026-117877

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the Layout: Text and Fonts component

    Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2026-117876

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Layout: Text and Fonts component

    Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2026-117875

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the Layout: Scrolling and Overflow component

    Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. CVE-2026-117874

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Internationalization component

    Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2026-117873

    Not ratedEPSS 0.19%Fix available

    Incorrect boundary conditions in the Audio/Video: Playback component

    Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2026-117872

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the JavaScript: Standard Library component

    Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2026-117871

    Not ratedEPSS 0.18%Fix available

    Invalid pointer in the Graphics component

    Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2026-117870

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the JavaScript Engine component

    Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. CVE-2026-117869

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. CVE-2026-117868

    Not ratedEPSS 0.19%Fix available

    Sandbox escape in the DOM: Networking component

    Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. CVE-2026-117867

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Layout component

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2026-117866

    Not ratedEPSS 0.19%Fix available

    Privilege escalation due to use-after-free in the Graphics: Canvas2D component

    Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. CVE-2026-117865

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the JavaScript: GC component

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. CVE-2026-117864

    Not ratedEPSS 0.18%Fix available

    Sandbox escape in the Form Manager component

    Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2026-117863

    Not ratedEPSS 0.19%Fix available

    Information disclosure due to uninitialized memory in the Audio/Video component

    Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. CVE-2026-117862

    Not ratedEPSS 0.19%Fix available

    Privilege escalation due to incorrect boundary conditions in the Networking component

    Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. CVE-2026-117861

    Not ratedEPSS 0.18%Fix available

    Sandbox escape in the DOM: Navigation component

    Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2026-117860

    Not ratedEPSS 0.19%Fix available

    Same-origin policy bypass in the DOM: Navigation component

    Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →