Skip to contentMozilla Firefox Esr vulnerabilities
- mozilla firefox, firefox esr, thunderbird +2 moreA website could have obscured the full screen notification by using the file open dialog. This...CVE-2023-5726Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...CVE-2023-5725Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDrivers are not always robust to extremely large draw calls and in some cases this scenario could...CVE-2023-5724Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible for certain browser prompts and dialogs to be activated or dismissed...CVE-2023-5721Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...CVE-2023-5176Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreIf Windows failed to duplicate a handle during process creation, the sandbox code may have...CVE-2023-5174Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...CVE-2023-5171Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA compromised content process could have provided malicious data in a `PathRecording` resulting...CVE-2023-5169Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in...CVE-2023-51689.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreBuffer Overflow in WebGL glGetProgramivCVE-2023-4582Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreInteger Overflow in RecordedSourceSurfaceCreationCVE-2023-4576Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2CVE-2023-4585Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2CVE-2023-4584Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreBrowsing Context potentially not cleared when closing Private WindowCVE-2023-4583Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreXLL file extensions were downloadable without warningsCVE-2023-4581Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 morePush notifications saved to disk unencryptedCVE-2023-4580Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreError reporting methods in SpiderMonkey could have triggered an Out of Memory ExceptionCVE-2023-4578Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in JIT UpdateRegExpStaticsCVE-2023-4577Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC FilePickerShownCallbackCVE-2023-4575Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC ColorPickerShownCallbackCVE-2023-4574Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC CanvasTranslatorCVE-2023-4573Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...CVE-2023-4057Fix available9.8 Critical
- mozilla firefox, firefox esr, debian linux +2 moreMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...CVE-2023-4056Fix available9.8 Critical
- mozilla firefox, firefox esr, debian linux +2 moreWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...CVE-2023-4055Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe Firefox updater created a directory writable by non-privileged users. When uninstalling...CVE-2023-4052Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreFull screen notification obscured by file open dialogCVE-2023-4051Fix available7.5 High
- mozilla firefox, firefox esr, debian linux +2 moreIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....CVE-2023-4050Fix availableEPSS 12.6%7.5 High
- mozilla firefox, firefox esr, debian linux +2 moreAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...CVE-2023-4048Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreUse-after-free in workersCVE-2023-3600Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...CVE-2023-37211Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...CVE-2023-37208Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA website could have obscured the fullscreen notification by using a URL with a scheme handled by...CVE-2023-37207Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...CVE-2023-37202Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...CVE-2023-37201Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...CVE-2023-34416Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreThe error page for sites with invalid TLS certificates was missing the
activation-delay Firefox...CVE-2023-34414Fix available3.1 Low
- mozilla firefox, firefox esr, thunderbird +2 moreProtocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of...CVE-2023-32214Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...CVE-2023-32215Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen reading a file, an uninitialized value could have been used as read limit. This...CVE-2023-32213Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....CVE-2023-32212Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA type checking bug would have led to invalid code being compiled. This vulnerability affects...CVE-2023-32211Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA missing delay in popup notifications could have made it possible for an attacker to trick a...CVE-2023-32207Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...CVE-2023-32206Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIn multiple cases browser prompts could have been obscured by popups controlled by content. These...CVE-2023-32205Fix available4.3 Medium
- mozilla firefox, firefox for android, focus +2 more +4 moreWhen a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain...CVE-2023-29547Fix available6.5 Medium
- mozilla firefox, firefox esr, firefox for android +4 more +6 moreMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...CVE-2023-29550Fix available8.8 High
- mozilla firefox, firefox esr, firefox for android +4 more +6 moreA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....CVE-2023-29548Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreSimilar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing...CVE-2023-29545Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA newline in a filename could have been used to bypass the file extension security mechanisms...CVE-2023-29542Fix available9.8 Critical
- mozilla firefox, firefox esr, firefox for android +4 more +6 moreFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...CVE-2023-29541Fix available8.8 High
- Show moreLoading…