Skip to contentMozilla Firefox Esr vulnerabilities
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreBuffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7,...CVE-2015-2716Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreUse-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox...CVE-2015-2713Fix available6.8 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreHeap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR...CVE-2015-2710Fix available6.8 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0,...CVE-2015-2708Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before...CVE-2015-0807Fix available6.8 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow...CVE-2015-0801Fix available7.5 High
- mozilla firefox, firefox esr, seamonkey +2 moreMozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow...CVE-2015-0818Fix available7.5 High
- mozilla firefox, firefox esr, seamonkey +2 moreThe asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and...CVE-2015-0817Fix available6.8 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMultiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0,...CVE-2015-08336.9 Medium
- mozilla firefox, firefox esr, seamonkey +2 moreUse-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox...CVE-2014-8641Fix available7.5 High
- mozilla firefox, firefox esr, seamonkey +1 more +3 moreMozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey...CVE-2014-8639Fix available6.8 Medium
- mozilla firefox, firefox esr, seamonkey +1 more +3 moreThe navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before...CVE-2014-8638Fix available6.8 Medium
- mozilla firefox, firefox esr, seamonkey +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0,...CVE-2014-8634Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple...CVE-2014-15952.1 Low
- google chrome, mozilla firefox, firefox esr +3 more +5 moreMozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before...CVE-2014-1568Fix availableEPSS 16.7%7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox...CVE-2014-1567Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreUnspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x...CVE-2014-1562Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0,...CVE-2014-155110.0 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreThe ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24...CVE-2014-1557Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow...CVE-2014-1556Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31...CVE-2014-1555Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0,...CVE-2014-1547Fix available10.0 High
- mozilla firefox, firefox esr, network security services +1 more +3 moreUse-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla...CVE-2014-1544Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation...CVE-2014-1541Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox...CVE-2014-1538Fix available10.0 High
- mozilla firefox, firefox esr +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0,...CVE-2014-1533Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0,...CVE-2015-0836Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUse-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function...CVE-2015-0831Fix available6.8 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreHeap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0,...CVE-2015-0827Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and...CVE-2015-0822Fix available4.3 Medium
- apple iphone os, mac os x, safari +21 more +23 moreThe TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on...CVE-2015-4000Public exploitFix availableEPSS 99.9%3.7 Low
- mozilla firefox, firefox esr, seamonkey +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0,...CVE-2012-04627.5 High
- mozilla firefox, firefox esr, seamonkey +2 more +4 moreMozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0,...CVE-2012-04606.4 Medium
- mozilla firefox, firefox esr, seamonkey +2 more +4 moreThe Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR...CVE-2012-04597.5 High
- mozilla firefox, firefox esr, seamonkey +2 more +4 moreMozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird...CVE-2012-04554.3 Medium
- mozilla firefox, firefox esr, seamonkey +2 more +4 moreUse-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3,...CVE-2012-04547.5 High
- mozilla firefox, firefox esr, seamonkey +2 more +4 moreCRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3,...CVE-2012-04514.3 Medium