2026-09-16 归档

今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-15 发布INFO

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunde...

CVE-2026-92027

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox E

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.

CVE-2026-92026

Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thu...

CVE-2026-92025

Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefo

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140...

CVE-2026-92024

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140...

CVE-2026-92023

Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Th...

CVE-2026-92022

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firef

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.

CVE-2026-92021

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbi

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140....

CVE-2026-92020

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was f

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-09-15 发布INFO

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 15...

CVE-2026-92019

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Th...

CVE-2026-92018

Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firef

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 1...

CVE-2026-92017

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-15 发布INFO

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.

CVE-2026-92016

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16,

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and...

CVE-2026-92015

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-15 发布INFO

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

CVE-2026-92014

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Fir

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-09-15 发布INFO