Vulnerabilidades en mozilla

2105 resultados
Análisis Vexday

A Mozilla apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas, nenhuma sob exploração ativa ou crítica. A fraqueza dominante identificada é CWE-400 (Uncontrolled Resource Consumption), que tipicamente afeta disponibilidade; a ausência de publicações recentes sugere que o risco atual não é imediato.

CVE-2026-2803HIGHInformation disclosure, mitigation bypass in the Settings UI componentEPSS 0.4%CVE-2026-74965HIGHPrivilege escalation in the Shell Integration componentEPSS 0.4%CVE-2026-74953HIGHPrivilege escalation in the Networking: Cookies componentEPSS 0.4%CVE-2025-8044CRITICALMemory safety bugs fixed in Firefox 141 and Thunderbird 141EPSS 0.4%CVE-2025-13016HIGHIncorrect boundary conditions in the JavaScript: WebAssembly componentEPSS 0.4%CVE-2026-74961CRITICALSide-channel in the Web Audio componentEPSS 0.4%CVE-2025-14333HIGHMemory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146EPSS 0.4%CVE-2016-5291—A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability affects Thunderbird < 45EPSS 0.4%CVE-2026-74938CRITICALMitigation bypass in the JavaScript: GC componentEPSS 0.4%CVE-2026-74945MEDIUMInformation disclosure in the Graphics: Text componentEPSS 0.4%CVE-2024-4778CRITICALMemory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soEPSS 0.4%CVE-2026-74948MEDIUMInformation disclosure in the Graphics componentEPSS 0.4%CVE-2024-5700HIGHMemory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruptiEPSS 0.4%CVE-2026-84132HIGHInformation disclosure in the Networking: HTTP componentEPSS 0.4%CVE-2026-8958HIGHInformation disclosure, sandbox escape in the Security: Process Sandboxing componentEPSS 0.4%CVE-2026-84130HIGHInformation disclosure in the Graphics: WebGPU componentEPSS 0.4%CVE-2026-74966HIGHInformation disclosure in the Form Autofill componentEPSS 0.4%CVE-2026-74954HIGHInformation disclosure due to side-channel in the Storage: Cache API componentEPSS 0.4%CVE-2026-2782HIGHPrivilege escalation in the Netmonitor componentEPSS 0.4%CVE-2025-4084MEDIUMPotential local code execution in "copy as cURL" commandEPSS 0.4%