# Mozilla Firefox ESR. Every CVE that names Mozilla Firefox ESR among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Mozilla Firefox ESR: When trying to connect to a STUN server…](https://agentprime.io/advisories/CVE-2020-12420.md) `CVE-2020-12420` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020 - [Mozilla Firefox ESR: When processing callbacks that occurred during window flushing in the parent process…](https://agentprime.io/advisories/CVE-2020-12419.md) `CVE-2020-12419` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020 - [Mozilla Firefox ESR: Due to confusion about ValueTags on JavaScript Objects…](https://agentprime.io/advisories/CVE-2020-12417.md) `CVE-2020-12417` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020 - [Mozilla Firefox ESR: Manipulating individual parts of a URL object could have caused an out-of-bounds read…](https://agentprime.io/advisories/CVE-2020-12418.md) `CVE-2020-12418` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020 - [Mozilla Firefox ESR: An integer overflow vulnerability in the Skia library when allocating memory for edge…](https://agentprime.io/advisories/CVE-2018-12371.md) `CVE-2018-12371` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 9 Jul 2020 - [A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC.](https://agentprime.io/advisories/CVE-2020-6831.md) `CVE-2020-6831` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 26 May 2020 - [A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability.](https://agentprime.io/advisories/CVE-2020-12387.md) `CVE-2020-12387` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 26 May 2020 - [Mozilla Firefox ESR: The Firefox content processes did not sufficiently lockdown access control which could…](https://agentprime.io/advisories/CVE-2020-12388.md) `CVE-2020-12388` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 26 May 2020 - [Mozilla Firefox ESR: The Firefox content processes did not sufficiently lockdown access control which could…](https://agentprime.io/advisories/CVE-2020-12389.md) `CVE-2020-12389` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 26 May 2020 - [Mozilla Firefox ESR: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST…](https://agentprime.io/advisories/CVE-2020-12392.md) `CVE-2020-12392` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 26 May 2020 - [Mozilla Firefox ESR: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP…](https://agentprime.io/advisories/CVE-2020-12393.md) `CVE-2020-12393` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 26 May 2020 - [Mozilla Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2020-12395.md) `CVE-2020-12395` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 26 May 2020 - [Use after free in Mozilla Thunderbird and others](https://agentprime.io/advisories/CVE-2020-6819.md) `CVE-2020-6819` · CVE record: Mozilla Thunderbird and 2 more · CVSS 8.1 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 24 Apr 2020 · Tags: Memory corruption - [Race condition in Mozilla Thunderbird and others](https://agentprime.io/advisories/CVE-2020-6820.md) `CVE-2020-6820` · CVE record: Mozilla Thunderbird and 2 more · CVSS 8.1 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 24 Apr 2020 · Tags: Race condition - [Mozilla Thunderbird: When reading from areas partially or fully outside the source resource with WebGL's…](https://agentprime.io/advisories/CVE-2020-6821.md) `CVE-2020-6821` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Apr 2020 - [Mozilla Thunderbird: On 32-bit builds, an out of bounds write could have occurred when processing an image…](https://agentprime.io/advisories/CVE-2020-6822.md) `CVE-2020-6822` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Apr 2020 - [Mozilla Thunderbird: Mozilla developers and community members Tyson Smith and Christian Holler reported memory…](https://agentprime.io/advisories/CVE-2020-6825.md) `CVE-2020-6825` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 24 Apr 2020 - [Mozilla Firefox ESR: When following a link that opened an intent://-schemed URL…](https://agentprime.io/advisories/CVE-2020-6827.md) `CVE-2020-6827` · CVE record: Mozilla Firefox ESR · No CVSS score · Not analysed yet · Published 24 Apr 2020 - [Mozilla Firefox ESR: A malicious Android application could craft an Intent that would have been processed by…](https://agentprime.io/advisories/CVE-2020-6828.md) `CVE-2020-6828` · CVE record: Mozilla Firefox ESR · No CVSS score · Not analysed yet · Published 24 Apr 2020 - [Mozilla Thunderbird: When removing data about an origin whose tab was recently closed…](https://agentprime.io/advisories/CVE-2020-6805.md) `CVE-2020-6805` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Mozilla Thunderbird: By carefully crafting promise resolutions…](https://agentprime.io/advisories/CVE-2020-6806.md) `CVE-2020-6806` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Mozilla Thunderbird: When a device was changed while a stream was about to be destroyed…](https://agentprime.io/advisories/CVE-2020-6807.md) `CVE-2020-6807` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Mozilla Thunderbird: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP…](https://agentprime.io/advisories/CVE-2020-6811.md) `CVE-2020-6811` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Mozilla Thunderbird: The first time AirPods are connected to an iPhone…](https://agentprime.io/advisories/CVE-2020-6812.md) `CVE-2020-6812` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5.](https://agentprime.io/advisories/CVE-2020-6814.md) `CVE-2020-6814` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 25 Mar 2020 - [Type confusion in Mozilla Firefox ESR and others](https://agentprime.io/advisories/CVE-2019-17026.md) `CVE-2019-17026` · CVE record: Mozilla Firefox ESR and 2 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.46 · Not analysed yet · Published 2 Mar 2020 · Tags: Memory corruption - [Mozilla Firefox ESR: Given a compromised sandboxed content process due to a separate vulnerability…](https://agentprime.io/advisories/CVE-2019-9812.md) `CVE-2019-9812` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3.](https://agentprime.io/advisories/CVE-2019-17024.md) `CVE-2019-17024` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox ESR: When pasting a \<style\> tag from the clipboard into a rich text editor…](https://agentprime.io/advisories/CVE-2019-17022.md) `CVE-2019-17022` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox ESR: During the initialization of a new content process…](https://agentprime.io/advisories/CVE-2019-17021.md) `CVE-2019-17021` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox ESR: Due to a missing case handling object types, a type confusion vulnerability could occur…](https://agentprime.io/advisories/CVE-2019-17017.md) `CVE-2019-17017` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox ESR: When pasting a \<style\> tag from the clipboard into a rich text editor…](https://agentprime.io/advisories/CVE-2019-17016.md) `CVE-2019-17016` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox ESR: During the initialization of a new content process…](https://agentprime.io/advisories/CVE-2019-17015.md) `CVE-2019-17015` · CVE record: Mozilla Firefox ESR and 1 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2.](https://agentprime.io/advisories/CVE-2019-17012.md) `CVE-2019-17012` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: Under certain conditions, when retrieving a document from a DocShell in the antitracking…](https://agentprime.io/advisories/CVE-2019-17011.md) `CVE-2019-17011` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: Under certain conditions, when checking the Resist Fingerprinting preference during…](https://agentprime.io/advisories/CVE-2019-17010.md) `CVE-2019-17010` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: When running, the updater service wrote status and log files to an unrestricted location…](https://agentprime.io/advisories/CVE-2019-17009.md) `CVE-2019-17009` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [When using nested workers, a use-after-free could occur during worker destruction.](https://agentprime.io/advisories/CVE-2019-17008.md) `CVE-2019-17008` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: The plain text serializer used a fixed-size array for the number of \
    elements it…](https://agentprime.io/advisories/CVE-2019-17005.md) `CVE-2019-17005` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-11764.md) `CVE-2019-11764` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: Failure to correctly handle null bytes when processing HTML entities resulted in Firefox…](https://agentprime.io/advisories/CVE-2019-11763.md) `CVE-2019-11763` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: If two same-origin documents set document.domain differently to become cross-origin…](https://agentprime.io/advisories/CVE-2019-11762.md) `CVE-2019-11762` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: By using a form with a data URI it was possible to gain access to the privileged JSONView…](https://agentprime.io/advisories/CVE-2019-11761.md) `CVE-2019-11761` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling.](https://agentprime.io/advisories/CVE-2019-11760.md) `CVE-2019-11760` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: An attacker could have caused 4 bytes of HMAC output to be written past the end of a…](https://agentprime.io/advisories/CVE-2019-11759.md) `CVE-2019-11759` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when…](https://agentprime.io/advisories/CVE-2019-11758.md) `CVE-2019-11758` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: When following the value's prototype chain…](https://agentprime.io/advisories/CVE-2019-11757.md) `CVE-2019-11757` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Thunderbird: When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data…](https://agentprime.io/advisories/CVE-2019-11745.md) `CVE-2019-11745` · CVE record: Mozilla Thunderbird and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2020 - [Mozilla Firefox: When a master password is set, it is required to be entered again before stored passwords…](https://agentprime.io/advisories/CVE-2019-11733.md) `CVE-2019-11733` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-11735.md) `CVE-2019-11735` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: The Mozilla Maintenance Service does not guard against files being hardlinked to another…](https://agentprime.io/advisories/CVE-2019-11736.md) `CVE-2019-11736` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: If a Content Security Policy (CSP) directive is defined that uses a hash-based source…](https://agentprime.io/advisories/CVE-2019-11738.md) `CVE-2019-11738` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Mozilla developers and community members reported memory safety bugs present in Firefox…](https://agentprime.io/advisories/CVE-2019-11740.md) `CVE-2019-11740` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: A same-origin policy violation occurs allowing the theft of cross-origin images through a…](https://agentprime.io/advisories/CVE-2019-11742.md) `CVE-2019-11742` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft…](https://agentprime.io/advisories/CVE-2019-11743.md) `CVE-2019-11743` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: Some HTML elements, such as \<title\> and \<textarea>…](https://agentprime.io/advisories/CVE-2019-11744.md) `CVE-2019-11744` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: A use-after-free vulnerability can occur while manipulating video elements if the body is…](https://agentprime.io/advisories/CVE-2019-11746.md) `CVE-2019-11746` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: The "Forget about this site" feature in the History pane is intended to remove all saved…](https://agentprime.io/advisories/CVE-2019-11747.md) `CVE-2019-11747` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: WebRTC in Firefox will honor persisted permissions given to sites for access to…](https://agentprime.io/advisories/CVE-2019-11748.md) `CVE-2019-11748` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 - [Mozilla Firefox: A vulnerability exists in WebRTC where malicious web content can use probing techniques…](https://agentprime.io/advisories/CVE-2019-11749.md) `CVE-2019-11749` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 27 Sept 2019 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .