p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 27

Vulnerabilities published for Operating systems in the last 30 days: 6617. Listed in the KEV catalogue: 4.

RSS ↗ JSON ↗
Filter vulnerabilities
Operating systems

Vulnerabilities: 159979

  1. CVE-2026-117942

    Not ratedEPSS 0.19%Fix available

    Incorrect boundary conditions in the JavaScript Engine: JIT component

    Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2026-117941

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: CSS Object Model component

    Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2026-117940

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2026-117939

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the XML component

    Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2026-117938

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Layout component

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. CVE-2026-117937

    Not ratedEPSS 0.19%Fix available

    Invalid pointer in the JavaScript Engine component

    Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2026-117936

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2026-117935

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Bindings (WebIDL) component

    Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2026-117934

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Layout component

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2026-117933

    Not ratedEPSS 0.18%Fix available

    Frame poisoning in the CSS Parsing and Computation component

    Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. CVE-2026-117932

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. CVE-2026-117931

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Events component

    Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. CVE-2026-117930

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Bindings (WebIDL) component

    Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2026-117929

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. CVE-2026-117928

    Not ratedEPSS 0.19%Fix available

    Same-origin policy bypass in the CSS Parsing and Computation component

    Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. CVE-2026-117927

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the SVG component

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2026-117926

    Not ratedEPSS 0.19%Fix available

    Incorrect boundary conditions in the SVG component

    Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. CVE-2026-117925

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. CVE-2026-117924

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the XSLT component

    Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2026-117923

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Audio/Video component

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →