p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости mozjs115 · Страница 24

За последние 30 дней в mozjs115 опубликовано уязвимостей: 257; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 1018

  1. CVE-2026-74952

    Высокий · CVSS 8.8EPSS 0,41%Нет опубликованного исправления

    Privilege escalation in the Application Update component

    Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2.

    Опубликовано Обновлено
  2. CVE-2026-74950

    Высокий · CVSS 8.8EPSS 0,41%Нет опубликованного исправления

    Privilege escalation in the Downloads API component

    Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  3. CVE-2026-74947

    Высокий · CVSS 8.8EPSS 0,45%Нет опубликованного исправления

    Privilege escalation due to invalid pointer in the Graphics component

    Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  4. CVE-2026-74938

    Критический · CVSS 9.1EPSS 0,44%Нет опубликованного исправления

    Mitigation bypass in the JavaScript: GC component

    Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  5. CVE-2026-74937

    Высокий · CVSS 8.8EPSS 0,44%Нет опубликованного исправления

    Use-after-free in the JavaScript: GC component

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

    Опубликовано Обновлено
  6. CVE-2026-75874

    Критический · CVSS 10EPSS 0,46%Нет опубликованного исправления

    Sandbox escape in the Remote Settings Client component

    Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 140.15, and Thunderbird 153.2.

    Опубликовано Обновлено
  7. CVE-2026-74990

    Критический · CVSS 9.8EPSS 0,71%Нет опубликованного исправления

    Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

    Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  8. CVE-2026-74987

    Критический · CVSS 9.8EPSS 0,71%Нет опубликованного исправления

    Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

    Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  9. CVE-2026-74983

    Высокий · CVSS 8.1EPSS 0,43%Нет опубликованного исправления

    Mitigation bypass in the Data Loss Prevention component

    Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  10. CVE-2026-74976

    Средний · CVSS 6.5EPSS 0,42%Нет опубликованного исправления

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  11. CVE-2026-74974

    Средний · CVSS 5.4EPSS 0,17%Нет опубликованного исправления

    Same-origin policy bypass in the Graphics: ImageLib component

    Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  12. CVE-2026-74973

    Средний · CVSS 4.2EPSS 0,21%Нет опубликованного исправления

    Race condition, use-after-free in the Graphics component

    Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  13. CVE-2026-74972

    Средний · CVSS 4.3EPSS 0,35%Нет опубликованного исправления

    Information disclosure in the DOM: Push Subscriptions component

    Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  14. CVE-2026-74971

    Средний · CVSS 4.3EPSS 0,35%Нет опубликованного исправления

    Information disclosure in the DOM: UI Events & Focus Handling component

    Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  15. CVE-2026-74969

    Высокий · CVSS 8.8EPSS 0,48%Нет опубликованного исправления

    Race condition, use-after-free in the Layout: Text and Fonts component

    Race condition, use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  16. CVE-2026-74967

    Средний · CVSS 5.4EPSS 0,17%Нет опубликованного исправления

    Same-origin policy bypass in the Audio/Video: Playback component

    Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  17. CVE-2026-74965

    Высокий · CVSS 8.8EPSS 0,44%Нет опубликованного исправления

    Privilege escalation in the Shell Integration component

    Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  18. CVE-2026-74964

    Критический · CVSS 9.8EPSS 0,68%Нет опубликованного исправления

    Integer overflow in the Graphics component

    Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено
  19. CVE-2026-74963

    Средний · CVSS 5.4EPSS 0,17%Нет опубликованного исправления

    Same-origin policy bypass in the Networking: Cookies component

    Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →