Mozilla Firefox Esr vulnerabilities
1,297 known vulnerabilities affecting mozilla/firefox_esr.
Total CVEs
1,297
CISA KEV
9
actively exploited
Public exploits
20
Exploited in wild
16
Severity breakdown
CRITICAL214HIGH400MEDIUM327LOW6UNKNOWN350
Vulnerabilities
Page 61 of 65
CVE-2026-117990P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-117990 Mozilla Foundation Security Advisory 2026-120: CVE-2026-117990
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-117990
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-118002P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-118002 Mozilla Foundation Security Advisory 2026-120: CVE-2026-118002
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-118002
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-117960P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-117960 Mozilla Foundation Security Advisory 2026-120: CVE-2026-117960
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-117960
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-117956P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-117956 Mozilla Foundation Security Advisory 2026-120: CVE-2026-117956
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-117956
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-117993P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-117993 Mozilla Foundation Security Advisory 2026-120: CVE-2026-117993
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-117993
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-117969P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-117969 Mozilla Foundation Security Advisory 2026-120: CVE-2026-117969
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-117969
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-117995P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-117995 Mozilla Foundation Security Advisory 2026-120: CVE-2026-117995
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-117995
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-117975P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-117975 Mozilla Foundation Security Advisory 2026-120: CVE-2026-117975
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-117975
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-117910P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-117910 Mozilla Foundation Security Advisory 2026-120: CVE-2026-117910
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-117910
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-118003P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-118003 Mozilla Foundation Security Advisory 2026-120: CVE-2026-118003
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-118003
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-117871P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-117871 Mozilla Foundation Security Advisory 2026-120: CVE-2026-117871
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-117871
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-117982P4UNKNOWNfixed in Firefox ESR 153.6
CVE-2026-117982 Mozilla Foundation Security Advisory 2026-120: CVE-2026-117982
Mozilla Foundation Security Advisory 2026-120
CVE: CVE-2026-117982
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.6
mozilla
CVE-2026-92069P4UNKNOWNfixed in Firefox ESR 153.3
CVE-2026-92069 Mozilla Foundation Security Advisory 2026-93: CVE-2026-92069
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92069
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2026-74967P4UNKNOWNfixed in Firefox ESR 153.1
CVE-2026-74967 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74967
Mozilla Foundation Security Advisory 2026-77
CVE: CVE-2026-74967
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.1
mozilla
CVE-2026-74970P4UNKNOWNfixed in Firefox ESR 153.1
CVE-2026-74970 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74970
Mozilla Foundation Security Advisory 2026-77
CVE: CVE-2026-74970
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.1
mozilla
CVE-2026-74968P4UNKNOWNfixed in Firefox ESR 153.1
CVE-2026-74968 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74968
Mozilla Foundation Security Advisory 2026-77
CVE: CVE-2026-74968
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.1
mozilla
CVE-2026-92068P4UNKNOWNfixed in Firefox ESR 153.3
CVE-2026-92068 Mozilla Foundation Security Advisory 2026-93: CVE-2026-92068
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92068
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2019-11715P4MEDIUMCVSS 6.1≥ unspecified, < 60.82019-07-23
CVE-2019-11715 [MEDIUM] CWE-79 CVE-2019-11715: Due to an error while parsing page content, it is possible for properly sanitized user input to be m
Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
nvd
CVE-2020-12405P4MEDIUMCVSS 5.3fixed in 68.9.0≥ unspecified, < 68.92020-07-09
CVE-2020-12405 [MEDIUM] CWE-362 CVE-2020-12405: When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
nvd
CVE-2020-15649P4MEDIUMCVSS 5.5fixed in 68.11≥ unspecified, < 68.112020-08-10
CVE-2020-15649 [MEDIUM] CWE-434 CVE-2020-15649: Given an installed malicious file picker application, an attacker was able to steal and upload local
Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.11.
nvd