Skip to contentMozilla Firefox Esr vulnerabilities
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...CVE-2016-9897Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...CVE-2016-9895Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...CVE-2016-9893Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreThe Mozilla Updater can be made to choose an arbitrary target working directory for output files...CVE-2016-52945.5 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...CVE-2016-9079In KEVPublic exploitFix availableEPSS 87.4%7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn existing mitigation of timing side-channel attacks is insufficient in some circumstances. This...CVE-2016-9074Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...CVE-2016-9066Public exploitFix availableEPSS 12.0%7.5 High
- mozilla firefox, firefox esr +1 moreAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...CVE-2016-9064Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn error in argument length checking in JavaScript, leading to potential integer overflows or...CVE-2016-5297Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...CVE-2016-5296Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....CVE-2016-5291Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...CVE-2016-5290Fix available9.8 Critical