Skip to contentMozilla Firefox Esr vulnerabilities
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreThe internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and...CVE-2017-5455Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA mechanism to bypass file system access protections in the sandbox to use the file picker to...CVE-2017-5454Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA mechanism to spoof the addressbar through the user interaction on the addressbar and the ...CVE-2017-5451Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA possibly exploitable crash triggered during layout and manipulation of bidirectional unicode...CVE-2017-5449Fix available7.5 High
- mozilla firefox, firefox esr, debian linux +6 more +8 moreAn out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media...CVE-2017-5448Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read during the processing of glyph widths during text layout. This results in a...CVE-2017-5447Public exploitFix availableEPSS 17.0%9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect...CVE-2017-5446Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA vulnerability while parsing "application/http-index-format" format content where uninitialized...CVE-2017-5445Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow vulnerability while parsing "application/http-index-format" format content when...CVE-2017-5444Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds write vulnerability while decoding improperly formed BinHex format archives....CVE-2017-5443Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during changes in style when manipulating DOM elements. This...CVE-2017-5442Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability when holding a selection during scroll events. This results in a...CVE-2017-5441Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to a failure to propagate error...CVE-2017-5440Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to poor handling of template parameters...CVE-2017-5439Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to the result handler being held by a...CVE-2017-5438Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite...CVE-2017-5436Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability occurs during transaction processing in the editor during design...CVE-2017-5435Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreA use-after-free vulnerability occurs when redirecting focus handling which results in a...CVE-2017-5434Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...CVE-2017-5433Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability occurs during certain text input selection resulting in a...CVE-2017-5432Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these...CVE-2017-5430Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...CVE-2017-5429Fix available9.8 Critical
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreAn integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix...CVE-2017-5428Fix available9.8 Critical
- mozilla firefox, firefox esr +1 moreThe Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local...CVE-2017-54095.5 Medium
- google chrome, mozilla firefox, firefox esr +2 moreA use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote...CVE-2017-5031Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory corruption resulting in a potentially exploitable crash during garbage collection of...CVE-2017-5410Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreVideo files loaded video captions cross-origin without checking for the presence of CORS headers...CVE-2017-5408Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...CVE-2017-5407Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreCertain response codes in FTP connections can result in the use of uninitialized values for ports...CVE-2017-5405Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free error can occur when manipulating ranges in selections with one node inside a...CVE-2017-5404Public exploitFix availableEPSS 16.9%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free can occur when events are fired for a "FontFace" object after the object has...CVE-2017-5402Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...CVE-2017-5401Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...CVE-2017-5400Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...CVE-2017-5398Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in the Media Decoder when working with media files when some...CVE-2017-5396Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...CVE-2017-5390Fix available9.8 Critical
- mozilla firefox, firefox esr, debian linux +6 more +8 moreWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...CVE-2017-5386Fix available7.3 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...CVE-2017-5383Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...CVE-2017-5380Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...CVE-2017-5378Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...CVE-2017-5376Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...CVE-2017-5375Public exploitFix availableEPSS 34.1%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...CVE-2017-5373Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...CVE-2016-9905Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...CVE-2016-9904Fix available7.5 High
- mozilla firefox, firefox esr, redhat enterprise linux desktop +4 more +6 moreThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...CVE-2016-9902Fix available7.5 High
- mozilla firefox, firefox esr, redhat enterprise linux aus +4 more +6 moreHTML tags received from the Pocket server will be processed without sanitization and any...CVE-2016-9901Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreExternal resources that should be blocked when loaded by SVG images can bypass security...CVE-2016-9900Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free while manipulating DOM events and removing audio elements due to errors in the...CVE-2016-9899Public exploitFix availableEPSS 19.4%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...CVE-2016-9898Fix available9.8 Critical
- Show moreLoading…