Mozilla Firefox Esr vulnerabilities

CVE-2021-4127 [CRITICAL] CVE-2021-4127: An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be e An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and Firefox ESR < 78.9.

CVE-2022-31747 [CRITICAL] CWE-125 CVE-2022-31747: Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memor Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thund

CVE-2023-4057 [CRITICAL] CWE-787 CVE-2023-4057: Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these b Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

CVE-2018-5178 [HIGH] CWE-119 CVE-2018-5178: A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremel A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.

CVE-2018-12363 [HIGH] CWE-416 CVE-2018-12363: A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60

CVE-2019-11745 [HIGH] CWE-787 CVE-2019-11745: When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.

CVE-2024-7519 [CRITICAL] CWE-787 CVE-2024-7519: Insufficient checks when processing graphics shared memory could have led to memory corruption. This Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

CVE-2026-74946 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74946 Mozilla Foundation Security Advisory 2026-77 CVE: CVE-2026-74946 Product: Firefox ESR Impact: high Fixed in: Firefox ESR 153.1

CVE-2026-74941 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74941 Mozilla Foundation Security Advisory 2026-77 CVE: CVE-2026-74941 Product: Firefox ESR Impact: high Fixed in: Firefox ESR 153.1

CVE-2026-74935 Mozilla Foundation Security Advisory 2026-76: CVE-2026-74935 Mozilla Foundation Security Advisory 2026-76 CVE: CVE-2026-74935 Product: Firefox ESR Impact: high Fixed in: Firefox ESR 140.14

CVE-2026-74939 Mozilla Foundation Security Advisory 2026-76: CVE-2026-74939 Mozilla Foundation Security Advisory 2026-76 CVE: CVE-2026-74939 Product: Firefox ESR Impact: high Fixed in: Firefox ESR 140.14

CVE-2026-16396 Mozilla Foundation Security Advisory 2026-70: CVE-2026-16396 Mozilla Foundation Security Advisory 2026-70 CVE: CVE-2026-16396 Product: Firefox ESR Impact: high Fixed in: Firefox ESR 140.13

CVE-2026-74937 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74937 Mozilla Foundation Security Advisory 2026-77 CVE: CVE-2026-74937 Product: Firefox ESR Impact: high Fixed in: Firefox ESR 153.1

CVE-2026-16362 Mozilla Foundation Security Advisory 2026-70: CVE-2026-16362 Mozilla Foundation Security Advisory 2026-70 CVE: CVE-2026-16362 Product: Firefox ESR Impact: high Fixed in: Firefox ESR 140.13

CVE-2026-74955 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74955 Mozilla Foundation Security Advisory 2026-77 CVE: CVE-2026-74955 Product: Firefox ESR Impact: high Fixed in: Firefox ESR 153.1

CVE-2020-15659 [HIGH] CWE-787 CVE-2020-15659: Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firef Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 79, Firefox ESR < 68.11, Firefox ESR < 78.1,

CVE-2026-12291 Mozilla Foundation Security Advisory 2026-58: CVE-2026-12291 Mozilla Foundation Security Advisory 2026-58 CVE: CVE-2026-12291 Product: Firefox ESR Impact: high Fixed in: Firefox ESR 140.12

CVE-2026-109762 Mozilla Foundation Security Advisory 2026-108: CVE-2026-109762 Mozilla Foundation Security Advisory 2026-108 CVE: CVE-2026-109762 Product: Firefox ESR Impact: low Fixed in: Firefox ESR 153.5

CVE-2026-109745 Mozilla Foundation Security Advisory 2026-108: CVE-2026-109745 Mozilla Foundation Security Advisory 2026-108 CVE: CVE-2026-109745 Product: Firefox ESR Impact: low Fixed in: Firefox ESR 153.5

CVE-2026-92018 Mozilla Foundation Security Advisory 2026-92: CVE-2026-92018 Mozilla Foundation Security Advisory 2026-92 CVE: CVE-2026-92018 Product: Firefox ESR Impact: moderate Fixed in: Firefox ESR 140.16