Skip to contentMozilla Firefox Esr vulnerabilities
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...CVE-2019-9819Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreImages from a different domain can be read using a canvas object in some circumstances. This...CVE-2019-9817Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA possible vulnerability exists where type confusion can occur when manipulating JavaScript...CVE-2019-9816Public exploitFix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members reported memory safety bugs present in Firefox 66,...CVE-2019-9800Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...CVE-2019-11698Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...CVE-2019-11693Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when listeners are removed from the event listener...CVE-2019-11692Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...CVE-2019-11691Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox will accept any registered Program ID as an external protocol handler and offer to launch...CVE-2019-9801Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability was discovered where specific command line arguments are not properly discarded...CVE-2019-9794Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...CVE-2019-9813Public exploitFix available8.8 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...CVE-2019-9810Public exploitFix availableEPSS 27.2%8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...CVE-2019-9796Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...CVE-2019-9795Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA mechanism was discovered that removes some bounds checking for string, array, or typed array...CVE-2019-9793Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...CVE-2019-9792Public exploitFix availableEPSS 13.3%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreThe type inference system allows the compilation of functions that can cause type confusions...CVE-2019-9791Public exploitFix availableEPSS 19.9%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...CVE-2019-9790Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMozilla developers and community members reported memory safety bugs present in Firefox 65,...CVE-2019-9788Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...CVE-2018-18505Fix available10.0 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMozilla developers and community members reported memory safety bugs present in Firefox 64 and...CVE-2018-18501Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability leading to an integer overflow can occur during buffer size...CVE-2018-18498Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA same-origin policy violation allowing the theft of cross-origin URL entries when using the...CVE-2018-18494Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...CVE-2018-18493Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur after deleting a selection element due to a weak...CVE-2018-18492Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox 63 and...CVE-2018-12405Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreDuring HTTP Live Stream playback on Firefox for Android, audio data can be accessed across...CVE-2018-123918.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreA WebExtension can request access to local files without the warning prompt stating that the...CVE-2018-12397Fix available7.1 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where a WebExtension can run content scripts in disallowed contexts following...CVE-2018-12396Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...CVE-2018-12395Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability was found in 32-bit builds where an integer overflow during the...CVE-2018-12393Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreWhen manipulating user events in nested loops while opening a document through script, it is...CVE-2018-12392Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox 62 and...CVE-2018-12390Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....CVE-2018-12389Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...CVE-2018-12387Fix available9.1 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...CVE-2018-12386Public exploitFix availableEPSS 13.5%8.1 High
- mozilla firefox, firefox esr +1 moreManually dragging and dropping an Outlook email message into the browser will trigger a page...CVE-2018-123815.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...CVE-2018-12379Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...CVE-2018-12385Fix available7.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreA same-origin policy violation allowing the theft of cross-origin URL entries when using a meta...CVE-2018-18499Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...CVE-2018-12383Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...CVE-2018-12378Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...CVE-2018-12377Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...CVE-2018-12376Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreWindows 10 does not warn users before opening executable files with the SettingContent-ms...CVE-2018-123688.1 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...CVE-2018-5188Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...CVE-2018-5187Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA vulnerability can occur when capturing a media stream when the media source type is changed as...CVE-2018-5156Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...CVE-2018-12371Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +2 moreWebExtensions bundled with embedded experiments were not correctly checked for proper...CVE-2018-12369Fix available9.8 Critical
- Show moreLoading…