Advisories · Technology
Mozilla Firefox ESR.
Every CVE that names Mozilla Firefox ESR among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Code injection in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Mozilla Firefox: A flaw in handling fullscreen transitions may have inadvertently caused the application…
- Mozilla Firefox
- Mozilla Firefox ESR
- CVSS 9.8 CriticalCritical · CVSS 9+
Double free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
- CVSS 8.8 High
Code injection in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Code injection
- CVSS 5.4 Medium
Improper signature verification in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Weak cryptography or TLS
- CVSS 5.4 Medium
Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1021
- CVSS 6.1 Medium
Cross-site scripting in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
Mozilla Firefox: The executable file warning was not presented when downloading .library-ms files. *Note…
- Mozilla Firefox
- Mozilla Firefox ESR
- CVSS 4.3 Medium
Authentication bypass by spoofing in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Authentication bypass
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds read in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 7.5 High
Uncontrolled resource consumption in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Denial of service
- CVSS 7.5 High
Authentication bypass by spoofing in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Authentication bypass
- CVSS 7.5 High
Out-of-bounds read in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 7.5 High
Observable discrepancy in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Information disclosure
- CVSS 7.5 High
Authentication bypass by spoofing in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Authentication bypass
- CVSS 6.1 Medium
Cross-site scripting in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Origin validation error in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-346
- CVSS 6.5 Medium
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 6.5 Medium
Mozilla Firefox: A permission leak could have occurred from a trusted site to an untrusted site via…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-281
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 High
Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 7.5 High
Improper resource shutdown in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Denial of service
- CVSS 5.3 Medium
Observable discrepancy in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Information disclosure
- CVSS 6.1 Medium
Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1021
- CVSS 8.8 High
Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 6.1 Medium
Cross-site scripting in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Cross-site scripting (XSS)
- CVSS 7.5 High
Origin validation error in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-346
- CVSS 9.8 CriticalCritical · CVSS 9+
Origin validation error in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-346
- CVSS 7.5 High
Incorrect permission assignment in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Broken access control
- CVSS 7.5 High
Type Confusion in Async Generators in Javascript Engine
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Buffer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 6.1 Medium
Authentication bypass by spoofing in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Type confusion in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 7.5 High
Mozilla Firefox: Firefox normally asks for confirmation before asking the operating system to find an…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1188
- CVSS 8.8 High
Mozilla Firefox: Internal browser event interfaces were exposed to web content when privileged…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-273
- CVSS 9.8 CriticalCritical · CVSS 9+
Type confusion in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 6.3 Medium
Time-of-check time-of-use race condition in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Race condition
- CVSS 8.1 High
The date picker could partially obscure security prompts.
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-451
- CVSS 9.8 CriticalCritical · CVSS 9+
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 High
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 7.5 High
Use of uninitialized resource in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Improper access control in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Broken access control
- CVSS 6.1 Medium
Cross-site scripting in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Cross-site scripting (XSS)
- CVSS 9.1 CriticalCritical · CVSS 9+
Out-of-bounds read in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Improper handling of exceptional conditions in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-755
- CVSS 8.8 High
Code injection in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Code injection
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 6.5 Medium
Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1021
- CVSS 7.5 High
Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 7.4 High
Memory corruption in thread creation
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-823
- CVSS 9.8 CriticalCritical · CVSS 9+
Memory corruption in NSS
- Mozilla Firefox
- Mozilla Firefox ESR
- Code injection
- CVSS 4.7 Medium
Race condition in permission assignment
- Mozilla Firefox
- Mozilla Firefox ESR
- Race condition
- CVSS 6.3 Medium
Memory corruption in WebGL API
- Mozilla Firefox
- Mozilla Firefox ESR
- Denial of service
- CVSS 7.0 High
Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11.
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CWE-786
- CVSS 8.6 High
Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 6.1 Medium
Mozilla Firefox: Offscreen Canvas did not properly track cross-origin tainting…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-829