Advisories · Technology

Mozilla Firefox ESR.

Every CVE that names Mozilla Firefox ESR among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-12385 CVE record

Mozilla Thunderbird: A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12383 CVE record

Mozilla Firefox: If a user saved passwords before Firefox 58 and then later set a master password…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12381 CVE record

Mozilla Firefox ESR: Manually dragging and dropping an Outlook email message into the browser will trigger a…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 18 Oct 2018
CVE-2018-12379 CVE record

Mozilla Firefox: When the Mozilla Updater opens a MAR format file which contains a very long item…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12378 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur when an IndexedDB index is deleted while still…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12377 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur when refresh driver timers are refreshed in some…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12376 CVE record

Memory safety bugs present in Firefox 61 and Firefox ESR 60.1.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12369 CVE record

WebExtensions bundled with embedded experiments were not correctly checked for proper authorization.
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 18 Oct 2018
CVE-2018-12368 CVE record

Mozilla Thunderbird: Windows 10 does not warn users before opening executable files with the SettingContent-ms…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12367 CVE record

Mozilla Thunderbird: In the previous mitigations for Spectre…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12366 CVE record

Mozilla Thunderbird: An invalid grid size during QCMS (color profile) transformations can result in the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12365 CVE record

Mozilla Thunderbird: A compromised IPC child process can escape the content sandbox and list the names of…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12364 CVE record

Mozilla Thunderbird: NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12363 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when script uses mutation events to move DOM…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12362 CVE record

Mozilla Thunderbird: An integer overflow can occur during graphics operations done by the Supplemental…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12361 CVE record

An integer overflow can occur in the SwizzleData code while calculating buffer sizes.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12360 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when deleting an input element during a mutation…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-12359 CVE record

Mozilla Thunderbird: A buffer overflow can occur when rendering canvas content while adjusting the height and…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 18 Oct 2018
CVE-2018-5183 CVE record

Mozilla developers backported selected changes in the Skia library.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5178 CVE record

Mozilla Thunderbird ESR: A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript…
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5174 CVE record

Mozilla Thunderbird: In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5168 CVE record

Mozilla Thunderbird: Sites can bypass security checks on permissions to install lightweight themes by…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5159 CVE record

Mozilla Thunderbird: An integer overflow can occur in the Skia library due to 32-bit integer use in an array…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5157 CVE record

Mozilla Firefox ESR: Same-origin protections for the PDF viewer can be bypassed…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 11 Jun 2018
CVE-2018-5155 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur while adjusting layout during SVG animations…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5154 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur while enumerating attributes during SVG…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5150 CVE record

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5148 CVE record

Mozilla Firefox ESR: A use-after-free vulnerability can occur in the compositor during certain graphics…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 11 Jun 2018
CVE-2018-5147 CVE record

The libtremor library has the same flaw as CVE-2018-5146.
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 11 Jun 2018
CVE-2018-5146 CVE record

Mozilla Firefox: An out of bounds memory write while processing Vorbis audio data was reported through the…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5145 CVE record

Memory safety bugs were reported in Firefox ESR 52.6.
- Mozilla Firefox ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5144 CVE record

Mozilla Firefox ESR: An integer overflow can occur during conversion of text to some Unicode character sets…
- Mozilla Firefox ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5131 CVE record

Mozilla Firefox ESR: Under certain circumstances the "fetch()" API can return transient local copies of…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 11 Jun 2018
CVE-2018-5130 CVE record

Mozilla Firefox ESR: When packets with a mismatched RTP payload type are sent in WebRTC connections…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 11 Jun 2018
CVE-2018-5129 CVE record

Mozilla Thunderbird: A lack of parameter validation on IPC messages results in a potential out-of-bounds write…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5127 CVE record

A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5125 CVE record

Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5117 CVE record

Mozilla Thunderbird: If right-to-left text is used in the addressbar with left-to-right alignment…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5104 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur during font face manipulation when a font face…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5103 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur during mouse event handling due to issues with…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5102 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when manipulating HTML media elements with media…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5099 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when the widget listener is holding strong…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5098 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when form input elements, focus…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5097 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur during XSL transformations when the source…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5096 CVE record

Mozilla Firefox ESR: A use-after-free vulnerability can occur while editing events in form elements on a page…
- Mozilla Firefox ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5095 CVE record

Mozilla Thunderbird: An integer overflow vulnerability in the Skia library when allocating memory for edge…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5091 CVE record

Mozilla Firefox ESR: A use-after-free vulnerability can occur during WebRTC connections when interacting with…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 11 Jun 2018
CVE-2018-5089 CVE record

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7845 CVE record

Mozilla Thunderbird: A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7843 CVE record

Mozilla Firefox ESR: When Private Browsing mode is used, it is possible for a web worker to write persistent…
- Mozilla Firefox ESR
- Mozilla Firefox
Not analysed yet 11 Jun 2018
CVE-2017-7830 CVE record

The Resource Timing API incorrectly revealed navigations in cross-origin iframes.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7828 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur when flushing and resizing layout because the…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7826 CVE record

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7825 CVE record

Several fonts on OS X display some Tibetan and Arabic characters as whitespace.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7824 CVE record

Mozilla Firefox: A buffer overflow occurs when drawing and validating elements with the ANGLE graphics…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7823 CVE record

Mozilla Firefox: The content security policy (CSP) "sandbox" directive did not create a unique origin for…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7819 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur in design mode when image objects are resized if…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7818 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7814 CVE record

Mozilla Firefox: File downloads encoded with "blob:" and "data:" URL elements bypassed normal file…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7810 CVE record

Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018