p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости mozjs52 · Страница 40

За последние 30 дней в mozjs52 опубликовано уязвимостей: 257; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 1727

  1. CVE-2026-2774

    Высокий · CVSS 8.8EPSS 0,85%Нет опубликованного исправления

    Integer overflow in the Audio/Video component

    Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  2. CVE-2026-2773

    Критический · CVSS 9.8EPSS 0,92%Нет опубликованного исправления

    Incorrect boundary conditions in the Web Audio component

    Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  3. CVE-2026-2772

    Высокий · CVSS 8.8EPSS 0,74%Нет опубликованного исправления

    Use-after-free in the Audio/Video: Playback component

    Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  4. CVE-2026-2771

    Критический · CVSS 9.8EPSS 0,76%Нет опубликованного исправления

    Undefined behavior in the DOM: Core & HTML component

    Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  5. CVE-2026-2770

    Высокий · CVSS 8.8EPSS 0,74%Нет опубликованного исправления

    Use-after-free in the DOM: Bindings (WebIDL) component

    Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  6. CVE-2026-2769

    Высокий · CVSS 8.8EPSS 0,69%Нет опубликованного исправления

    Use-after-free in the Storage: IndexedDB component

    Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  7. CVE-2026-2768

    Критический · CVSS 10EPSS 0,44%Нет опубликованного исправления

    Sandbox escape in the Storage: IndexedDB component

    Sandbox escape in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  8. CVE-2026-2767

    Высокий · CVSS 8.8EPSS 0,46%Нет опубликованного исправления

    Use-after-free in the JavaScript: WebAssembly component

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  9. CVE-2026-2766

    Критический · CVSS 9.8EPSS 0,74%Нет опубликованного исправления

    Use-after-free in the JavaScript Engine: JIT component

    Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  10. CVE-2026-2765

    Критический · CVSS 9.8EPSS 0,74%Нет опубликованного исправления

    Use-after-free in the JavaScript Engine component

    Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  11. CVE-2026-2764

    Критический · CVSS 9.8EPSS 0,74%Нет опубликованного исправления

    JIT miscompilation, use-after-free in the JavaScript Engine: JIT component

    JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  12. CVE-2026-2763

    Критический · CVSS 9.8EPSS 0,74%Нет опубликованного исправления

    Use-after-free in the JavaScript Engine component

    Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  13. CVE-2026-2762

    Критический · CVSS 9.8EPSS 0,63%Нет опубликованного исправления

    Integer overflow in the JavaScript: Standard Library component

    Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  14. CVE-2026-2761

    Критический · CVSS 10EPSS 0,47%Нет опубликованного исправления

    Sandbox escape in the Graphics: WebRender component

    Sandbox escape in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  15. CVE-2026-2760

    Критический · CVSS 10EPSS 0,47%Нет опубликованного исправления

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  16. CVE-2026-2759

    Критический · CVSS 9.8EPSS 0,47%Нет опубликованного исправления

    Incorrect boundary conditions in the Graphics: ImageLib component

    Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  17. CVE-2026-2758

    Критический · CVSS 9.8EPSS 0,57%Нет опубликованного исправления

    Use-after-free in the JavaScript: GC component

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  18. CVE-2026-2757

    Критический · CVSS 9.8EPSS 0,59%Нет опубликованного исправления

    Incorrect boundary conditions in the WebRTC: Audio/Video component

    Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  19. CVE-2026-2032

    Средний · CVSS 4.3EPSS 0,18%Нет опубликованного исправления

    Interrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOS

    Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability was fixed in Firefox for iOS 147.2.1.

    Опубликовано Обновлено
  20. CVE-2026-0892

    Критический · CVSS 9.8EPSS 0,45%Нет опубликованного исправления

    Memory safety bugs fixed in Firefox 147 and Thunderbird 147

    Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147.

    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →