Mozilla Firefox Esr vulnerabilities
1,297 known vulnerabilities affecting mozilla/firefox_esr.
Total CVEs
1,297
CISA KEV
9
actively exploited
Public exploits
20
Exploited in wild
16
Severity breakdown
CRITICAL214HIGH400MEDIUM327LOW6UNKNOWN350
Vulnerabilities
Page 6 of 65
CVE-2026-109756P3HIGHCVSS 8.8fixed in Firefox ESR 153.5
CVE-2026-109756 [HIGH] Mozilla Foundation Security Advisory 2026-108: CVE-2026-109756
Mozilla Foundation Security Advisory 2026-108
CVE: CVE-2026-109756
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.5
mozilla
CVE-2026-109778P3HIGHCVSS 8.8fixed in Firefox ESR 153.5
CVE-2026-109778 [HIGH] Mozilla Foundation Security Advisory 2026-108: CVE-2026-109778
Mozilla Foundation Security Advisory 2026-108
CVE: CVE-2026-109778
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.5
mozilla
CVE-2014-1557P3CRITICALCVSS 9.3v24.2v24.3+3 more2014-07-23
CVE-2014-1557 [CRITICAL] CWE-94 CVE-2014-1557: The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x
The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does not properly handle the discarding of image data during function execution, which allows remote attackers to execute arbitrary code by triggering prolonged image scaling, as demonstrated by scaling of a hig
nvd
CVE-2018-5158P3HIGHCVSS 8.8≥ unspecified, < 52.82018-06-11
CVE-2018-5158 [HIGH] CWE-94 CVE-2018-5158: The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious Ja
The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions of the PDF viewer by its worker. This vulnerability affects Firefox ESR < 52.8 and Firefox < 60.
nvd
CVE-2024-11693P3CRITICALCVSS 9.8≥ unspecified, < 128.52024-11-26
CVE-2024-11693 [CRITICAL] CVE-2024-11693: The executable file warning was not presented when downloading .library-ms files. *Note: This issu
The executable file warning was not presented when downloading .library-ms files.
*Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.
nvd
CVE-2026-2781P3CRITICALCVSS 9.8fixed in Firefox ESR 115.35
CVE-2026-2781 [CRITICAL] Mozilla Foundation Security Advisory 2026-31: CVE-2026-2781
Mozilla Foundation Security Advisory 2026-31
CVE: CVE-2026-2781
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 115.35
mozilla
CVE-2026-74943P3UNKNOWNfixed in Firefox ESR 115.39
CVE-2026-74943 Mozilla Foundation Security Advisory 2026-75: CVE-2026-74943
Mozilla Foundation Security Advisory 2026-75
CVE: CVE-2026-74943
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 115.39
mozilla
CVE-2026-16355P3UNKNOWNfixed in Firefox ESR 115.38
CVE-2026-16355 Mozilla Foundation Security Advisory 2026-69: CVE-2026-16355
Mozilla Foundation Security Advisory 2026-69
CVE: CVE-2026-16355
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 115.38
mozilla
CVE-2026-16353P3UNKNOWNfixed in Firefox ESR 140.13
CVE-2026-16353 Mozilla Foundation Security Advisory 2026-70: CVE-2026-16353
Mozilla Foundation Security Advisory 2026-70
CVE: CVE-2026-16353
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 140.13
mozilla
CVE-2026-84134P3UNKNOWNfixed in Firefox ESR 153.2
CVE-2026-84134 Mozilla Foundation Security Advisory 2026-85: CVE-2026-84134
Mozilla Foundation Security Advisory 2026-85
CVE: CVE-2026-84134
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.2
mozilla
CVE-2026-16368P3UNKNOWNfixed in Firefox ESR 140.13
CVE-2026-16368 Mozilla Foundation Security Advisory 2026-70: CVE-2026-16368
Mozilla Foundation Security Advisory 2026-70
CVE: CVE-2026-16368
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 140.13
mozilla
CVE-2026-74959P3UNKNOWNfixed in Firefox ESR 153.1
CVE-2026-74959 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74959
Mozilla Foundation Security Advisory 2026-77
CVE: CVE-2026-74959
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.1
mozilla
CVE-2026-84143P3UNKNOWNfixed in Firefox ESR 140.15
CVE-2026-84143 Mozilla Foundation Security Advisory 2026-84: CVE-2026-84143
Mozilla Foundation Security Advisory 2026-84
CVE: CVE-2026-84143
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 140.15
mozilla
CVE-2026-84119P3CRITICALCVSS 9.6fixed in Firefox ESR 153.2
CVE-2026-84119 [CRITICAL] Mozilla Foundation Security Advisory 2026-85: CVE-2026-84119
Mozilla Foundation Security Advisory 2026-85
CVE: CVE-2026-84119
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.2
mozilla
CVE-2026-100762P3CRITICALCVSS 9.6fixed in Firefox ESR 153.4
CVE-2026-100762 [CRITICAL] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100762
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100762
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-100778P3CRITICALCVSS 9.6fixed in Firefox ESR 153.4
CVE-2026-100778 [CRITICAL] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100778
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100778
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-100786P3CRITICALCVSS 9.6fixed in Firefox ESR 153.4
CVE-2026-100786 [CRITICAL] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100786
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100786
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-100770P3CRITICALCVSS 9.6fixed in Firefox ESR 140.17
CVE-2026-100770 [CRITICAL] Mozilla Foundation Security Advisory 2026-99: CVE-2026-100770
Mozilla Foundation Security Advisory 2026-99
CVE: CVE-2026-100770
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 140.17
mozilla
CVE-2026-92075P3UNKNOWNfixed in Firefox ESR 153.3
CVE-2026-92075 Mozilla Foundation Security Advisory 2026-93: CVE-2026-92075
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92075
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2026-92041P3UNKNOWNfixed in Firefox ESR 153.3
CVE-2026-92041 Mozilla Foundation Security Advisory 2026-93: CVE-2026-92041
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92041
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla