Mozilla Firefox Esr vulnerabilities
1,297 known vulnerabilities affecting mozilla/firefox_esr.
Total CVEs
1,297
CISA KEV
9
actively exploited
Public exploits
20
Exploited in wild
16
Severity breakdown
CRITICAL214HIGH400MEDIUM327LOW6UNKNOWN350
Vulnerabilities
Page 10 of 65
CVE-2026-100772P3HIGHCVSS 8.8fixed in Firefox ESR 140.17
CVE-2026-100772 [HIGH] Mozilla Foundation Security Advisory 2026-99: CVE-2026-100772
Mozilla Foundation Security Advisory 2026-99
CVE: CVE-2026-100772
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 140.17
mozilla
CVE-2026-92015P3HIGHCVSS 8.8fixed in Firefox ESR 153.3
CVE-2026-92015 [HIGH] Mozilla Foundation Security Advisory 2026-93: CVE-2026-92015
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92015
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2026-92009P3HIGHCVSS 8.8fixed in Firefox ESR 140.16
CVE-2026-92009 [HIGH] Mozilla Foundation Security Advisory 2026-92: CVE-2026-92009
Mozilla Foundation Security Advisory 2026-92
CVE: CVE-2026-92009
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 140.16
mozilla
CVE-2026-92008P3HIGHCVSS 8.8fixed in Firefox ESR 115.41
CVE-2026-92008 [HIGH] Mozilla Foundation Security Advisory 2026-91: CVE-2026-92008
Mozilla Foundation Security Advisory 2026-91
CVE: CVE-2026-92008
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 115.41
mozilla
CVE-2026-100782P3HIGHCVSS 8.8fixed in Firefox ESR 140.17
CVE-2026-100782 [HIGH] Mozilla Foundation Security Advisory 2026-99: CVE-2026-100782
Mozilla Foundation Security Advisory 2026-99
CVE: CVE-2026-100782
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 140.17
mozilla
CVE-2026-92011P3HIGHCVSS 8.8fixed in Firefox ESR 115.41
CVE-2026-92011 [HIGH] Mozilla Foundation Security Advisory 2026-91: CVE-2026-92011
Mozilla Foundation Security Advisory 2026-91
CVE: CVE-2026-92011
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 115.41
mozilla
CVE-2026-92007P3HIGHCVSS 8.8fixed in Firefox ESR 153.3
CVE-2026-92007 [HIGH] Mozilla Foundation Security Advisory 2026-93: CVE-2026-92007
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92007
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2026-92010P3HIGHCVSS 8.8fixed in Firefox ESR 153.3
CVE-2026-92010 [HIGH] Mozilla Foundation Security Advisory 2026-93: CVE-2026-92010
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92010
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2026-92012P3HIGHCVSS 8.8fixed in Firefox ESR 115.41
CVE-2026-92012 [HIGH] Mozilla Foundation Security Advisory 2026-91: CVE-2026-92012
Mozilla Foundation Security Advisory 2026-91
CVE: CVE-2026-92012
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 115.41
mozilla
CVE-2026-92020P3HIGHCVSS 8.8fixed in Firefox ESR 153.3
CVE-2026-92020 [HIGH] Mozilla Foundation Security Advisory 2026-93: CVE-2026-92020
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92020
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2026-92013P3HIGHCVSS 8.8fixed in Firefox ESR 153.3
CVE-2026-92013 [HIGH] Mozilla Foundation Security Advisory 2026-93: CVE-2026-92013
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92013
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2026-92017P3HIGHCVSS 8.8fixed in Firefox ESR 153.3
CVE-2026-92017 [HIGH] Mozilla Foundation Security Advisory 2026-93: CVE-2026-92017
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92017
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2026-100815P3HIGHCVSS 8.8fixed in Firefox ESR 153.4
CVE-2026-100815 [HIGH] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100815
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100815
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-100825P3HIGHCVSS 8.8fixed in Firefox ESR 153.4
CVE-2026-100825 [HIGH] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100825
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100825
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-92055P3HIGHCVSS 8.8fixed in Firefox ESR 153.3
CVE-2026-92055 [HIGH] Mozilla Foundation Security Advisory 2026-93: CVE-2026-92055
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92055
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2026-100824P3HIGHCVSS 8.8fixed in Firefox ESR 153.4
CVE-2026-100824 [HIGH] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100824
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100824
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-8958P3HIGHCVSS 8.6fixed in Firefox ESR 140.11
CVE-2026-8958 [HIGH] Mozilla Foundation Security Advisory 2026-48: CVE-2026-8958
Mozilla Foundation Security Advisory 2026-48
CVE: CVE-2026-8958
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 140.11
mozilla
CVE-2024-5688P3HIGHCVSS 8.1≥ unspecified, < 115.122024-06-11
CVE-2024-5688 [HIGH] CWE-416 CVE-2024-5688: If a garbage collection was triggered at the right time, a use-after-free could have occurred during
If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
nvd
CVE-2019-11693P3CRITICALCVSS 9.8≥ unspecified, < 60.72019-07-23
CVE-2019-11693 [CRITICAL] CWE-787 CVE-2019-11693: The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers o
The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.7, Firefox <
nvd
CVE-2019-11692P3CRITICALCVSS 9.8≥ unspecified, < 60.72019-07-23
CVE-2019-11692 [CRITICAL] CWE-416 CVE-2019-11692: A use-after-free vulnerability can occur when listeners are removed from the event listener manager
A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.
nvd