Tra cứu CVE

Mọi CVE đã công bố cùng các advisory mã nguồn mở (NVD, OSV, GitHub), kèm CVSS, EPSS và cho biết lỗ hổng có đang bị khai thác thực tế hay không (CISA KEV). Cập nhật mỗi vài giờ. Các bài quét đối chiếu dữ liệu này với công nghệ phát hiện được trên site.

403.511 lỗ hổng · 1.767 đang bị khai thác (CISA KEV)

firefox ✕Xoá bộ lọc

3.421 kết quả

Mã	Mức độ	Mô tả	Công bố
CVE-2026-24869	CAO8.8	Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 147.0.2.	27/01/2026
CVE-2026-24868	TRUNG BÌNH6.5	Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2.	27/01/2026
CVE-2026-0892	NGHIÊM TRỌNG9.8	Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147.	13/01/2026
CVE-2026-0891	CAO8.1	Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147, Firefox ESR	13/01/2026
CVE-2026-0890	TRUNG BÌNH5.4	Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.	13/01/2026
CVE-2026-0889	CAO7.5	Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.	13/01/2026
CVE-2026-0888	TRUNG BÌNH5.3	Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.	13/01/2026
CVE-2026-0887	TRUNG BÌNH4.3	Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.	13/01/2026
CVE-2026-0886	TRUNG BÌNH5.3	Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.	13/01/2026
CVE-2026-0885	TRUNG BÌNH6.5	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.	13/01/2026
CVE-2026-0884	NGHIÊM TRỌNG9.8	Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.	13/01/2026
CVE-2026-0883	TRUNG BÌNH5.3	Information disclosure in the Networking component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.	13/01/2026
CVE-2026-0882	CAO8.8	Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.	13/01/2026
CVE-2026-0881	NGHIÊM TRỌNG10.0	Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147.	13/01/2026
CVE-2026-0880	CAO8.8	Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.	13/01/2026
CVE-2026-0879	NGHIÊM TRỌNG9.8	Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.	13/01/2026
CVE-2026-0878	CAO8.0	Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.	13/01/2026
CVE-2026-0877	CAO8.1	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.	13/01/2026
CVE-2025-14861	CAO8.8	Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146.0.1.	18/12/2025
CVE-2025-14860	NGHIÊM TRỌNG9.8	Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 146.0.1.	18/12/2025