Skip to contentMozilla Firefox Esr vulnerabilities
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...CVE-2017-7824Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...CVE-2017-7823Fix available5.4 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur in design mode when image objects are resized if objects...CVE-2017-7819Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...CVE-2017-7818Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...CVE-2017-7814Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...CVE-2017-7810Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...CVE-2017-7805Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...CVE-2017-7793Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreThe destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious...CVE-2017-78047.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is...CVE-2017-77825.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...CVE-2017-7807Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...CVE-2017-7803Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...CVE-2017-7802Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...CVE-2017-7801Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...CVE-2017-7800Fix available9.8 Critical
- mozilla firefox, firefox esr, debian linux +6 more +8 moreThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...CVE-2017-7798Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow will occur when viewing a certificate in the certificate manager if the...CVE-2017-7792Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...CVE-2017-7791Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreSame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...CVE-2017-7787Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...CVE-2017-7786Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)...CVE-2017-7785Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreMemory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of...CVE-2017-7779Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line,...CVE-2017-7753Fix available9.1 Critical
- mozilla firefox, firefox esr +1 moreThe Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any...CVE-2017-77685.5 Medium
- mozilla firefox, firefox esr +1 moreThe Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable...CVE-2017-77615.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe Firefox installer on Windows can be made to load malicious DLL files stored in the same...CVE-2017-77557.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe "Mark of the Web" was not correctly saved on Windows when files with very long names were...CVE-2017-77657.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDefault fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar...CVE-2017-77635.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads,...CVE-2017-7778Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreCharacters from the "Canadian Syllabics" unicode block can be mixed with characters from other...CVE-2017-7764Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreAn out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio...CVE-2017-7758Fix available9.1 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while...CVE-2017-7757Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP...CVE-2017-7756Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL...CVE-2017-7754Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during specific user interactions with the input method editor ...CVE-2017-7752Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability with content viewer listeners that results in a potentially...CVE-2017-7751Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during video control operations when a "<track>" element holds a...CVE-2017-7750Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability when using an incorrect URL during the reloading of a docshell....CVE-2017-7749Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability with the frameloader during tree reconstruction while regenerating...CVE-2017-5472Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed...CVE-2017-5470Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreFixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex....CVE-2017-5469Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA potential memory corruption and crash when using Skia content when drawing content outside of...CVE-2017-5467Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreIf a page is loaded from an original site through a hyperlink and contains a redirect to a "data...CVE-2017-5466Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash...CVE-2017-5465Public exploitFix availableEPSS 18.2%9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreDuring DOM manipulations of the accessibility tree through script, the DOM tree can become out of...CVE-2017-5464Fix available9.8 Critical
- mozilla firefox, firefox esr, network security services +2 more +4 moreA flaw in DRBG number generation within the Network Security Services (NSS) library where the...CVE-2017-5462Fix available5.3 Medium
- mozilla network security services, firefox, firefox esr +1 more +3 moreMozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29...CVE-2017-5461Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in frame selection triggered by a combination of malicious script...CVE-2017-5460Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable...CVE-2017-5459Fix available9.8 Critical
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreA mechanism to bypass file system access protections in the sandbox using the file system request...CVE-2017-5456Fix available9.8 Critical
- Show moreLoading…