p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости firefox-esr · Страница 10

За последние 30 дней в firefox-esr опубликовано уязвимостей: 206; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 1382

  1. CVE-2026-109720

    Высокий · CVSS 7.1EPSS 0,26%Есть исправление

    JIT miscompilation in the JavaScript: WebAssembly component

    JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  2. CVE-2026-109717

    Средний · CVSS 5.4EPSS 0,22%Есть исправление

    Use-after-free in the DOM: Bindings (WebIDL) component

    Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  3. CVE-2026-109713

    Средний · CVSS 5.4EPSS 0,22%Есть исправление

    Use-after-free in the Crash Reporting component

    Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  4. CVE-2026-109711

    Средний · CVSS 5.4EPSS 0,22%Есть исправление

    Use-after-free in the Graphics: Canvas2D component

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  5. CVE-2026-109709

    Высокий · CVSS 8.8EPSS 0,33%Есть исправление

    Information disclosure, privilege escalation in the Security: Process Sandboxing component

    Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  6. CVE-2026-109708

    Критический · CVSS 9.6EPSS 0,33%Есть исправление

    Sandbox escape due to incorrect boundary conditions in the Networking component

    Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  7. CVE-2026-109707

    Критический · CVSS 9.6EPSS 0,33%Есть исправление

    Sandbox escape due to use-after-free in the Networking component

    Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  8. CVE-2026-109705

    Критический · CVSS 9.6EPSS 0,33%Есть исправление

    Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component

    Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  9. CVE-2026-109704

    Высокий · CVSS 8.8EPSS 0,41%Нет опубликованного исправления

    Privilege escalation in the Application Update component

    Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    Опубликовано Обновлено
  10. CVE-2026-109753

    Высокий · CVSS 8.1EPSS 0,34%Есть исправление

    Incorrect boundary conditions in the Layout component

    Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  11. CVE-2026-109733

    Высокий · CVSS 8.1EPSS 0,46%Есть исправление

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  12. CVE-2026-109732

    Средний · CVSS 5.4EPSS 0,24%Есть исправление

    Use-after-free in the DOM: Streams component

    Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  13. CVE-2026-109730

    Высокий · CVSS 8.8EPSS 0,36%Есть исправление

    Integer overflow in the Graphics component

    Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  14. CVE-2026-109729

    Средний · CVSS 5.4EPSS 0,24%Есть исправление

    Use-after-free in the JavaScript Engine: JIT component

    Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  15. CVE-2026-109728

    Средний · CVSS 5.4EPSS 0,23%Есть исправление

    Use-after-free in the DOM: Animation component

    Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  16. CVE-2026-109727

    Средний · CVSS 5.4EPSS 0,23%Есть исправление

    Use-after-free in the Audio/Video component

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  17. CVE-2026-109726

    Средний · CVSS 5.4EPSS 0,23%Есть исправление

    Use-after-free in the SVG component

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  18. CVE-2026-109725

    Средний · CVSS 5.4EPSS 0,23%Есть исправление

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  19. CVE-2026-109722

    Высокий · CVSS 8.1EPSS 0,31%Публичный эксплойтЕсть исправление

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено
  20. CVE-2026-109719

    Средний · CVSS 4.2EPSS 0,17%Есть исправление

    Race condition, use-after-free in the Graphics: CanvasWebGL component

    Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    • Обновитесь до 153.5.0esr-1~deb12u1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →