Skip to contentMozilla Firefox Esr vulnerabilities
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...CVE-2019-9819Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreImages from a different domain can be read using a canvas object in some circumstances. This...CVE-2019-9817Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA possible vulnerability exists where type confusion can occur when manipulating JavaScript...CVE-2019-9816Public exploitFix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members reported memory safety bugs present in Firefox 66,...CVE-2019-9800Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...CVE-2019-11691Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox will accept any registered Program ID as an external protocol handler and offer to launch...CVE-2019-9801Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...CVE-2019-9795Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA mechanism was discovered that removes some bounds checking for string, array, or typed array...CVE-2019-9793Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMozilla developers and community members reported memory safety bugs present in Firefox 64 and...CVE-2018-18501Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...CVE-2018-18500Public exploitFix availableEPSS 12.7%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability leading to an integer overflow can occur during buffer size...CVE-2018-18498Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreDuring HTTP Live Stream playback on Firefox for Android, audio data can be accessed across...CVE-2018-123918.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where a WebExtension can run content scripts in disallowed contexts following...CVE-2018-12396Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...CVE-2018-12395Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability was found in 32-bit builds where an integer overflow during the...CVE-2018-12393Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...CVE-2018-12385Fix available7.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreA same-origin policy violation allowing the theft of cross-origin URL entries when using a meta...CVE-2018-18499Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...CVE-2018-12383Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWindows 10 does not warn users before opening executable files with the SettingContent-ms...CVE-2018-123688.1 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...CVE-2018-5188Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...CVE-2018-12366Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA compromised IPC child process can escape the content sandbox and list the names of arbitrary...CVE-2018-12365Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...CVE-2018-12364Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...CVE-2018-12363Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...CVE-2018-12362Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...CVE-2018-12361Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when deleting an input element during a mutation event...CVE-2018-12360Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur when rendering canvas content while adjusting the height and width of...CVE-2018-12359Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreSame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...CVE-2017-7787Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...CVE-2017-7786Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when reading an image observer during frame...CVE-2017-7784Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA potential memory corruption and crash when using Skia content when drawing content outside of...CVE-2017-5467Fix available7.5 High
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreAn integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix...CVE-2017-5428Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...CVE-2016-9897Fix available7.5 High
- mozilla firefox, firefox esr, oracle solaris +2 moreMozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not...CVE-2015-2741Fix available4.3 Medium
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +2 more +4 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2015-2733Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla...CVE-2015-2729Fix available5.0 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2725Fix available10.0 High
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +3 more +5 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2015-2722Fix available10.0 High
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +3 more +5 morePDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1...CVE-2015-2743Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreBuffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before...CVE-2015-2740Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2739Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in...CVE-2015-2738Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before...CVE-2015-2737Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2736Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 morensZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38...CVE-2015-2735Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla...CVE-2015-2734Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUse-after-free vulnerability in the CSPService::ShouldLoad function in the microtask...CVE-2015-2731Fix available10.0 High
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +2 more +4 moreThe IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0...CVE-2015-2728Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2724Fix available10.0 High
- Show moreLoading…