p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 29

Vulnerabilities published for Operating systems in the last 30 days: 6617. Listed in the KEV catalogue: 4.

RSS ↗ JSON ↗
Filter vulnerabilities
Operating systems

Vulnerabilities: 159979

  1. CVE-2026-117902

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the Layout: Text and Fonts component

    Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2026-117901

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2026-117900

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Editor component

    Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2026-117899

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Networking: HTTP component

    Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2026-117898

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the JavaScript Engine: JIT component

    Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. CVE-2026-117897

    Not ratedEPSS 0.19%Fix available

    Incorrect boundary conditions in the Layout: Tables component

    Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2026-117896

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2026-117895

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. CVE-2026-117894

    Not ratedEPSS 0.18%Fix available

    Incorrect boundary conditions in the WebRTC: Signaling component

    Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. CVE-2026-117893

    Not ratedEPSS 0.19%Fix available

    Incorrect boundary conditions in the Security: PSM component

    Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. CVE-2026-117892

    Not ratedEPSS 0.19%Fix available

    Privilege escalation due to use-after-free in the WebRTC: Networking component

    Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. CVE-2026-117891

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the JavaScript Engine: JIT component

    Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. CVE-2026-117890

    Not ratedEPSS 0.18%Fix available

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. CVE-2026-117889

    Not ratedEPSS 0.19%Fix available

    Incorrect boundary conditions in the JavaScript Engine component

    Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. CVE-2026-117888

    Not ratedEPSS 0.18%Fix available

    Uninitialized memory in the Graphics: Canvas2D component

    Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. CVE-2026-117887

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2026-117886

    Not ratedEPSS 0.19%Fix available

    Incorrect boundary conditions in the Graphics: Text component

    Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. CVE-2026-117885

    Not ratedEPSS 0.18%Fix available

    Use-after-free in the Layout: Grid component

    Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. CVE-2026-117884

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the Networking component

    Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2026-117883

    Not ratedEPSS 0.19%Fix available

    Use-after-free in the DOM: HTML Parser component

    Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    firefox thunderbird firefox-esr firefox-esr firefox-esr thunderbird thunderbird thunderbird mozjs52 mozjs38 mozjs68 mozjs52Operating systems
    • Update to 153.6.0esr-1~deb12u2
    • Update to 153.6.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →