Skip to contentMozilla Firefox Esr vulnerabilities
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...CVE-2021-38503Fix available10.0 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...CVE-2021-38501Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreDuring process shutdown, a document could have caused a use-after-free of a languages service...CVE-2021-38498Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreThrough use of reportValidity() and window.open(), a plain-text validation message could have...CVE-2021-38497Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some...CVE-2021-38500Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring operations on MessageTasks, a task may have been removed while it was still scheduled,...CVE-2021-38496Fix available8.8 High
- mozilla firefox esr, thunderbird +1 moreMozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs...CVE-2021-38495Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen delegating navigations to the operating system, Firefox would accept the `mk` scheme which...CVE-2021-38492Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some...CVE-2021-38493Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some...CVE-2021-29989Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...CVE-2021-29988Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...CVE-2021-29986Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability in media channels could have led to memory corruption and a...CVE-2021-29985Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreInstruction reordering resulted in a sequence of instructions that would cause an object to be...CVE-2021-29984Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreUninitialized memory in a canvas object could have caused an incorrect free() leading to memory...CVE-2021-29980Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in code shared between Firefox and...CVE-2021-29976Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA malicious webpage could have triggered a use-after-free, memory corruption, and a potentially...CVE-2021-29970Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process...CVE-2021-29964Fix available7.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain...CVE-2021-29951Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some...CVE-2021-29967Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 morePorts that were written as an integer overflow above the bounds of a 16-bit integer could have...CVE-2021-29946Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...CVE-2021-29945Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...CVE-2021-24002Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...CVE-2021-23999Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...CVE-2021-23998Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...CVE-2021-23995Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...CVE-2021-23994Fix available8.8 High
- mozilla firefox esr, thunderbird +1 moreAn out of date graphics library (Angle) likely contained vulnerabilities that could potentially...CVE-2021-4127Fix available9.8 Critical
- mozilla firefox, firefox esr +1 moreA transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an...CVE-2021-29955Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members reported memory safety bugs present in Firefox 86 and...CVE-2021-23987Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA malicious extension could have opened a popup window lacking an address bar. The title of the...CVE-2021-23984Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUsing techniques that built on the slipstream research, a malicious webpage could have scanned...CVE-2021-23982Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...CVE-2021-23981Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...CVE-2021-23978Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...CVE-2021-23973Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...CVE-2021-23969Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...CVE-2021-23968Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...CVE-2021-23964Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 morePerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...CVE-2021-23960Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreUsing the new logical assignment operators in a JavaScript switch statement could have caused a...CVE-2021-23954Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...CVE-2021-23953Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...CVE-2020-35112Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some...CVE-2020-35113Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest...CVE-2020-35111Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUsing techniques that built on the slipstream research, a malicious webpage could have exposed...CVE-2020-26978Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...CVE-2020-26974Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....CVE-2020-26973Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreCertain blit values provided by the user were not properly constrained leading to a heap buffer...CVE-2020-26971Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreSearching for a single word from the address bar caused an mDNS request to be sent on the local...CVE-2020-26966Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some...CVE-2020-26968Fix available8.8 High
- Show moreLoading…