p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости mozjs78 · Страница 39

За последние 30 дней в mozjs78 опубликовано уязвимостей: 257; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 1468

  1. CVE-2026-2794

    Средний · CVSS 6.5EPSS 0,3%Нет опубликованного исправления

    Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android

    Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.

    Опубликовано Обновлено
  2. CVE-2026-2634

    Критический · CVSS 9.8EPSS 0,36%Нет опубликованного исправления

    Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS

    Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4.

    Опубликовано Обновлено
  3. CVE-2026-2793

    Критический · CVSS 9.8EPSS 0,38%Нет опубликованного исправления

    Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148

    Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  4. CVE-2026-2792

    Критический · CVSS 9.8EPSS 0,38%Нет опубликованного исправления

    Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148

    Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  5. CVE-2026-2791

    Критический · CVSS 9.8EPSS 0,6%Нет опубликованного исправления

    Mitigation bypass in the Networking: Cache component

    Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  6. CVE-2026-2790

    Высокий · CVSS 8.8EPSS 0,25%Нет опубликованного исправления

    Same-origin policy bypass in the Networking: JAR component

    Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  7. CVE-2026-2789

    Высокий · CVSS 8.8EPSS 0,53%Нет опубликованного исправления

    Use-after-free in the Graphics: ImageLib component

    Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  8. CVE-2026-2788

    Критический · CVSS 9.8EPSS 0,68%Нет опубликованного исправления

    Incorrect boundary conditions in the Audio/Video: GMP component

    Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  9. CVE-2026-2787

    Высокий · CVSS 8.8EPSS 0,64%Нет опубликованного исправления

    Use-after-free in the DOM: Window and Location component

    Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  10. CVE-2026-2786

    Высокий · CVSS 8.8EPSS 0,51%Нет опубликованного исправления

    Use-after-free in the JavaScript Engine component

    Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

  11. CVE-2026-2785

    Высокий · CVSS 8.8EPSS 0,58%Нет опубликованного исправления

    Invalid pointer in the JavaScript Engine component

    Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  12. CVE-2026-2784

    Критический · CVSS 9.8EPSS 0,49%Нет опубликованного исправления

    Mitigation bypass in the DOM: Security component

    Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  13. CVE-2026-2783

    Средний · CVSS 6.5EPSS 0,34%Нет опубликованного исправления

    Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component

    Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  14. CVE-2026-2782

    Высокий · CVSS 8.8EPSS 0,34%Нет опубликованного исправления

    Privilege escalation in the Netmonitor component

    Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  15. CVE-2026-2780

    Высокий · CVSS 8.8EPSS 0,4%Нет опубликованного исправления

    Privilege escalation in the Netmonitor component

    Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  16. CVE-2026-2779

    Критический · CVSS 9.8EPSS 0,69%Нет опубликованного исправления

    Incorrect boundary conditions in the Networking: JAR component

    Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  17. CVE-2026-2778

    Критический · CVSS 10EPSS 0,56%Нет опубликованного исправления

    Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component

    Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  18. CVE-2026-2777

    Критический · CVSS 9.8EPSS 0,44%Нет опубликованного исправления

    Privilege escalation in the Messaging System component

    Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  19. CVE-2026-2776

    Критический · CVSS 10EPSS 0,56%Нет опубликованного исправления

    Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software

    Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено
  20. CVE-2026-2775

    Критический · CVSS 9.8EPSS 0,84%Нет опубликованного исправления

    Mitigation bypass in the DOM: HTML Parser component

    Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →