# Mozilla Firefox ESR. Every CVE that names Mozilla Firefox ESR among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Mozilla Firefox: Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability…](https://agentprime.io/advisories/CVE-2023-6207.md) `CVE-2023-6207` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 21 Nov 2023 - [Mozilla Firefox: The black fade animation when exiting fullscreen is roughly the length of the…](https://agentprime.io/advisories/CVE-2023-6206.md) `CVE-2023-6206` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 21 Nov 2023 - [Mozilla Firefox: It was possible to cause the use of a MessagePort after it had already been freed…](https://agentprime.io/advisories/CVE-2023-6205.md) `CVE-2023-6205` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 21 Nov 2023 - [Mozilla Firefox: On some systems—depending on the graphics settings and drivers—it was possible to force…](https://agentprime.io/advisories/CVE-2023-6204.md) `CVE-2023-6204` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 21 Nov 2023 - [Address bar spoofing via bidirectional characters](https://agentprime.io/advisories/CVE-2023-5732.md) `CVE-2023-5732` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 24 Oct 2023 - [Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3.](https://agentprime.io/advisories/CVE-2023-5730.md) `CVE-2023-5730` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 24 Oct 2023 - [Use after free in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-5728.md) `CVE-2023-5728` · CVE record: Mozilla Firefox and 2 more · CVSS 7.5 High · Not analysed yet · Published 24 Oct 2023 · Tags: Memory corruption - [Mozilla Firefox: The executable file warning was not presented when downloading .msix, .msixbundle, .appx…](https://agentprime.io/advisories/CVE-2023-5727.md) `CVE-2023-5727` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 24 Oct 2023 - [A website could have obscured the full screen notification by using the file open dialog.](https://agentprime.io/advisories/CVE-2023-5726.md) `CVE-2023-5726` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 24 Oct 2023 - [Mozilla Firefox: A malicious installed WebExtension could open arbitrary URLs…](https://agentprime.io/advisories/CVE-2023-5725.md) `CVE-2023-5725` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 24 Oct 2023 - [Uncontrolled resource consumption in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-5724.md) `CVE-2023-5724` · CVE record: Mozilla Firefox and 2 more · CVSS 7.5 High · Not analysed yet · Published 24 Oct 2023 · Tags: Denial of service - [Mozilla Firefox: It was possible for certain browser prompts and dialogs to be activated or dismissed…](https://agentprime.io/advisories/CVE-2023-5721.md) `CVE-2023-5721` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 24 Oct 2023 - [Out-of-bounds write in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-5176.md) `CVE-2023-5176` · CVE record: Mozilla Firefox and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Sept 2023 · Tags: Memory corruption - [Use after free in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-5174.md) `CVE-2023-5174` · CVE record: Mozilla Firefox and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Sept 2023 · Tags: Memory corruption - [Mozilla Firefox: During Ion compilation, a Garbage Collection could have resulted in a use-after-free…](https://agentprime.io/advisories/CVE-2023-5171.md) `CVE-2023-5171` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2023 - [Mozilla Firefox: A compromised content process could have provided malicious data in a \`PathRecording\`…](https://agentprime.io/advisories/CVE-2023-5169.md) `CVE-2023-5169` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 27 Sept 2023 - [Out-of-bounds write in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-5168.md) `CVE-2023-5168` · CVE record: Mozilla Firefox and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Sept 2023 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2](https://agentprime.io/advisories/CVE-2023-4585.md) `CVE-2023-4585` · CVE record: Mozilla Firefox and 2 more · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2023 · Tags: Memory corruption - [Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2](https://agentprime.io/advisories/CVE-2023-4584.md) `CVE-2023-4584` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Sept 2023 - [Browsing Context potentially not cleared when closing Private Window](https://agentprime.io/advisories/CVE-2023-4583.md) `CVE-2023-4583` · CVE record: Mozilla Firefox and 2 more · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2023 · Tags: CWE-754 - [Buffer Overflow in WebGL glGetProgramiv](https://agentprime.io/advisories/CVE-2023-4582.md) `CVE-2023-4582` · CVE record: Mozilla Firefox and 2 more · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2023 · Tags: Memory corruption - [XLL file extensions were downloadable without warnings](https://agentprime.io/advisories/CVE-2023-4581.md) `CVE-2023-4581` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Sept 2023 - [Push notifications saved to disk unencrypted](https://agentprime.io/advisories/CVE-2023-4580.md) `CVE-2023-4580` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Sept 2023 - [Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception](https://agentprime.io/advisories/CVE-2023-4578.md) `CVE-2023-4578` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Sept 2023 - [Memory corruption in JIT UpdateRegExpStatics](https://agentprime.io/advisories/CVE-2023-4577.md) `CVE-2023-4577` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Sept 2023 - [Integer Overflow in RecordedSourceSurfaceCreation](https://agentprime.io/advisories/CVE-2023-4576.md) `CVE-2023-4576` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Sept 2023 - [Memory corruption in IPC FilePickerShownCallback](https://agentprime.io/advisories/CVE-2023-4575.md) `CVE-2023-4575` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Sept 2023 - [Memory corruption in IPC ColorPickerShownCallback](https://agentprime.io/advisories/CVE-2023-4574.md) `CVE-2023-4574` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Sept 2023 - [Memory corruption in IPC CanvasTranslator](https://agentprime.io/advisories/CVE-2023-4573.md) `CVE-2023-4573` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 11 Sept 2023 - [Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0.](https://agentprime.io/advisories/CVE-2023-4057.md) `CVE-2023-4057` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 - [Mozilla Firefox: Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13…](https://agentprime.io/advisories/CVE-2023-4056.md) `CVE-2023-4056` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 - [Buffer overflow in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-4055.md) `CVE-2023-4055` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 · Tags: Memory corruption - [Mozilla Firefox: When opening appref-ms files, Firefox did not warn the user that these files may contain…](https://agentprime.io/advisories/CVE-2023-4054.md) `CVE-2023-4054` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 - [Full screen notification obscured by external program](https://agentprime.io/advisories/CVE-2023-4053.md) `CVE-2023-4053` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 - [The Firefox updater created a directory writable by non-privileged users.](https://agentprime.io/advisories/CVE-2023-4052.md) `CVE-2023-4052` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 - [Full screen notification obscured by file open dialog](https://agentprime.io/advisories/CVE-2023-4051.md) `CVE-2023-4051` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 - [In some cases, an untrusted input stream was copied to a stack buffer without checking its size.](https://agentprime.io/advisories/CVE-2023-4050.md) `CVE-2023-4050` · CVE record: Mozilla Firefox and 1 more · No CVSS score · EPSS 0.13 · Not analysed yet · Published 1 Aug 2023 - [Race conditions in reference counting code were found through code inspection.](https://agentprime.io/advisories/CVE-2023-4049.md) `CVE-2023-4049` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 - [Mozilla Firefox: An out-of-bounds read could have led to an exploitable crash when parsing HTML with…](https://agentprime.io/advisories/CVE-2023-4048.md) `CVE-2023-4048` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 - [Cross-site request forgery in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-4047.md) `CVE-2023-4047` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 · Tags: Cross-site request forgery (CSRF) - [Resource allocation without limits in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-4046.md) `CVE-2023-4046` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 · Tags: Denial of service - [Mozilla Firefox: Offscreen Canvas did not properly track cross-origin tainting…](https://agentprime.io/advisories/CVE-2023-4045.md) `CVE-2023-4045` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 1 Aug 2023 - [Use-after-free in workers](https://agentprime.io/advisories/CVE-2023-3600.md) `CVE-2023-3600` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 12 Jul 2023 - [Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12.](https://agentprime.io/advisories/CVE-2023-37211.md) `CVE-2023-37211` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 - [Unrestricted file upload in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-37208.md) `CVE-2023-37208` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 · Tags: Unrestricted file upload - [Mozilla Firefox: A website could have obscured the fullscreen notification by using a URL with a scheme…](https://agentprime.io/advisories/CVE-2023-37207.md) `CVE-2023-37207` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 - [Mozilla Firefox: Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other…](https://agentprime.io/advisories/CVE-2023-37202.md) `CVE-2023-37202` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 - [Mozilla Firefox: An attacker could have triggered a use-after-free condition when creating a WebRTC…](https://agentprime.io/advisories/CVE-2023-37201.md) `CVE-2023-37201` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 5 Jul 2023 - [Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12.](https://agentprime.io/advisories/CVE-2023-34416.md) `CVE-2023-34416` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 19 Jun 2023 - [Mozilla Firefox ESR: The error page for sites with invalid TLS certificates was missing the activation-delay…](https://agentprime.io/advisories/CVE-2023-34414.md) `CVE-2023-34414` · CVE record: Mozilla Firefox ESR and 2 more · No CVSS score · Not analysed yet · Published 19 Jun 2023 - [Mozilla Firefox: Similar to CVE-2023-28163, this time when choosing 'Save Link As'…](https://agentprime.io/advisories/CVE-2023-29545.md) `CVE-2023-29545` · CVE record: Mozilla Firefox and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Jun 2023 - [Mozilla Firefox: A newline in a filename could have been used to bypass the file extension security…](https://agentprime.io/advisories/CVE-2023-29542.md) `CVE-2023-29542` · CVE record: Mozilla Firefox and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jun 2023 - [Mozilla Firefox: A local attacker can trick the Mozilla Maintenance Service into applying an unsigned…](https://agentprime.io/advisories/CVE-2023-29532.md) `CVE-2023-29532` · CVE record: Mozilla Firefox and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Jun 2023 - [Out-of-bounds write in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-29531.md) `CVE-2023-29531` · CVE record: Mozilla Firefox and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jun 2023 · Tags: Memory corruption - [Mozilla Firefox: Protocol handlers \`ms-cxh\` and \`ms-cxh-full\` could have been leveraged to trigger a…](https://agentprime.io/advisories/CVE-2023-32214.md) `CVE-2023-32214` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 19 Jun 2023 - [Mozilla Firefox: Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough…](https://agentprime.io/advisories/CVE-2023-32215.md) `CVE-2023-32215` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 2 Jun 2023 - [When reading a file, an uninitialized value could have been used as read limit.](https://agentprime.io/advisories/CVE-2023-32213.md) `CVE-2023-32213` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 2 Jun 2023 - [An attacker could have positioned a \`datalist\` element to obscure the address bar.](https://agentprime.io/advisories/CVE-2023-32212.md) `CVE-2023-32212` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 2 Jun 2023 - [A type checking bug would have led to invalid code being compiled.](https://agentprime.io/advisories/CVE-2023-32211.md) `CVE-2023-32211` · CVE record: Mozilla Firefox and 2 more · No CVSS score · Not analysed yet · Published 2 Jun 2023 - [Authentication bypass by spoofing in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-32207.md) `CVE-2023-32207` · CVE record: Mozilla Firefox and 2 more · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2023 · Tags: Authentication bypass Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .