Advisories · Technology
Mozilla Firefox ESR.
Every CVE that names Mozilla Firefox ESR among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Origin validation error in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-346
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
- CVSS 6.5 Medium
Use after free in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
- CVSS 6.5 Medium
Insecure storage of sensitive information in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Information disclosure
- CVSS 6.5 Medium
Injection in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Other injection
- CVSS 6.5 Medium
Mozilla Firefox ESR: Inconsistent data in instruction and data cache when creating wasm code could lead to a…
- Mozilla Firefox ESR
- Mozilla Thunderbird
- CWE-240
- CVSS 6.1 Medium
Cross-site scripting in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Cross-site scripting (XSS)
- CVSS 8.8 High
Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
- CVSS 7.5 High
Use after free in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
- CVSS 8.8 High
Mozilla Thunderbird: A cross-origin iframe referencing an XSLT document would inherit the parent domain's…
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-281
- CVSS 6.5 Medium
Origin validation error in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-346
- CVSS 7.5 High
Clickjacking in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- CWE-1021
- CVSS 5.3 Medium
Race condition in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Race condition
- CVSS 5.5 Medium
Uncontrolled search path in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- CWE-427
- CVSS 8.8 High
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 High
Integer overflow in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 6.5 Medium
Mozilla Firefox: A malicious website that could create a popup could have resized the popup to overlay the…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-451
- CVSS 6.5 Medium
Open redirect in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Open redirect
- CVSS 4.3 Medium
Mozilla Firefox: If there was a PAC URL set and the server that hosts the PAC was not reachable…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-703
- CVSS 9.8 CriticalCritical · CVSS 9+
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 High
Mozilla Firefox: An iframe that was not permitted to run scripts could do so if the user clicked on a…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-829
- CVSS 5.5 Medium
Out-of-bounds read in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Buffer overflow in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 6.5 Medium
Cross-site scripting in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Observable discrepancy in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Information disclosure
- CVSS 8.8 High
Use of uninitialized resource in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Buffer overflow in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
External control of a file path in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Path traversal
- CVSS 6.5 Medium
Authentication bypass by spoofing in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Mozilla Thunderbird: A malicious website could have learned the size of a cross-origin resource that supported…
- Mozilla Thunderbird
- Mozilla Firefox
- CWE-942
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Memory corruption
- CVSS 6.5 Medium
Information disclosure in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Information disclosure
- CVSS 6.5 Medium
Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-1021
- CVSS 6.1 Medium
Open redirect in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Open redirect
- CVSS 6.1 Medium
Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- CWE-1021
- CVSS 8.8 High
Incorrect default permissions in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox ESR
- Broken access control
- CVSS 8.8 High
Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 5.4 Medium
Clickjacking in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- CWE-1021
- CVSS 6.5 Medium
Out-of-bounds read in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 6.5 Medium
Use after free in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Thunderbird and others
- Mozilla Thunderbird
- Mozilla Firefox
- Memory corruption
- CVSS 9.6 CriticalCritical · KEV, CVSS 9+KEV
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 7.5 High
Time-of-check time-of-use race condition in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Race condition
- CVSS 6.5 Medium
Insecure temporary file in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Thunderbird
- CWE-377
- CVSS 9.6 CriticalCritical · CVSS 9+
Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-693
- CVSS 4.3 Medium
Mozilla Firefox: When resizing a popup after requesting fullscreen access…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-451
- CVSS 8.8 High
Use after free in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
- CVSS 8.8 High
Race condition in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Race condition
- CVSS 8.8 High
Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
- CVSS 6.5 Medium
Sensitive information in error messages in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Information disclosure
- CVSS 9.6 CriticalCritical · CVSS 9+
Protection mechanism failure in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
- CVSS 8.8 High
Code injection in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Code injection
- CVSS 6.5 Medium
Incorrect authorization in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Broken access control
- CVSS 7.1 High
Time-of-check time-of-use race condition in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- Race condition
- CVSS 8.8 High
Out-of-bounds write in Mozilla Firefox ESR and others
- Mozilla Firefox ESR
- Mozilla Firefox
- Memory corruption