p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 24

Vulnerabilities published for Operating systems in the last 30 days: 6979. Listed in the KEV catalogue: 4.

RSS ↗ JSON ↗
Filter vulnerabilities
Operating systems

Vulnerabilities: 159896

  1. CVE-2026-117924

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the XSLT component

    Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2026-117923

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Audio/Video component

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2026-117922

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Networking: WebSockets component

    Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2026-117921

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the CSS Parsing and Computation component

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2026-117920

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the DOM: HTML Parser component

    Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. CVE-2026-117919

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2026-117918

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Graphics: Canvas2D component

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2026-117917

    Not ratedEPSS 0.19%Fix available

    Invalid pointer in the Graphics: WebRender component

    Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2026-117916

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the XSLT component

    Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2026-117915

    Not ratedEPSS 0.19%Fix available

    Incorrect boundary conditions in the Layout: Block and Inline component

    Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. CVE-2026-117914

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the SVG component

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. CVE-2026-117913

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the SVG component

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. CVE-2026-117912

    Not ratedEPSS 0.2%Fix available

    Same-origin policy bypass in the CSS Parsing and Computation component

    Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2026-117911

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Audio/Video: Playback component

    Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. CVE-2026-117910

    Not ratedEPSS 0.18%Fix available

    Invalid pointer in the JavaScript Engine component

    Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. CVE-2026-117909

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the JavaScript: GC component

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2026-117908

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Graphics: ImageLib component

    Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. CVE-2026-117907

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Networking component

    Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. CVE-2026-117906

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the CSS Parsing and Computation component

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2026-117905

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Audio/Video: Playback component

    Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →