Skip to contentMozilla Firefox Esr vulnerabilities
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability in media channels could have led to memory corruption and a...CVE-2021-29985Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreInstruction reordering resulted in a sequence of instructions that would cause an object to be...CVE-2021-29984Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...CVE-2021-29980Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in code shared between Firefox and...CVE-2021-29976Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...CVE-2021-29970Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...CVE-2021-29964Fix available7.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain...CVE-2021-29951Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...CVE-2021-29967Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 morePorts that were written as an integer overflow above the bounds of a 16-bit integer could have...CVE-2021-29946Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...CVE-2021-29945Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...CVE-2021-24002Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...CVE-2021-23999Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...CVE-2021-23998Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...CVE-2021-23995Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...CVE-2021-23994Fix available8.8 High
- mozilla firefox esr, thunderbird +1 moreAn out of date graphics library (Angle) likely contained vulnerabilities that could potentially...CVE-2021-4127Fix available9.8 Critical
- mozilla firefox, firefox esr +1 moreA transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an...CVE-2021-29955Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members reported memory safety bugs present in Firefox 86 and...CVE-2021-23987Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA malicious extension could have opened a popup window lacking an address bar. The title of the...CVE-2021-23984Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUsing techniques that built on the slipstream research, a malicious webpage could have scanned...CVE-2021-23982Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...CVE-2021-23981Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...CVE-2021-23978Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...CVE-2021-23973Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...CVE-2021-23969Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...CVE-2021-23968Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...CVE-2021-23964Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 morePerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...CVE-2021-23960Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreUsing the new logical assignment operators in a JavaScript switch statement could have caused a...CVE-2021-23954Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...CVE-2021-23953Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...CVE-2020-35112Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...CVE-2020-35113Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...CVE-2020-35111Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUsing techniques that built on the slipstream research, a malicious webpage could have exposed...CVE-2020-26978Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...CVE-2020-26974Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....CVE-2020-26973Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreCertain blit values provided by the user were not properly constrained leading to a heap buffer...CVE-2020-26971Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreSearching for a single word from the address bar caused an mDNS request to be sent on the local...CVE-2020-26966Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...CVE-2020-26968Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreSome websites have a feature "Show Password" where clicking a button will change a password field...CVE-2020-26965Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the...CVE-2020-26961Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf the Compact() method was called on an nsTArray, the array could have been reallocated without...CVE-2020-26960Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreDuring browser shutdown, reference decrementing could have occured on a previously freed object,...CVE-2020-26959Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox did not block execution of scripts with incorrect MIME types when the response was...CVE-2020-26958Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIn some cases, removing HTML elements during sanitization would keep existing SVG event handlers...CVE-2020-26956Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIt was possible to cause the browser to enter fullscreen mode without displaying the security UI;...CVE-2020-26953Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire...CVE-2020-26951Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions...CVE-2020-26950Public exploitFix availableEPSS 42.3%8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers and community members reported memory safety bugs present in Firefox 81 and...CVE-2020-15683Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...CVE-2020-15678Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...CVE-2020-15677Fix available6.1 Medium
- Show moreLoading…