Mozilla Firefox Esr vulnerabilities
1,297 known vulnerabilities affecting mozilla/firefox_esr.
Total CVEs
1,297
CISA KEV
9
actively exploited
Public exploits
20
Exploited in wild
16
Severity breakdown
CRITICAL214HIGH400MEDIUM327LOW6UNKNOWN350
Vulnerabilities
Page 8 of 65
CVE-2024-8384P3CRITICALCVSS 9.8fixed in 115.15≥ 128.0, < 128.2+2 more2024-09-03
CVE-2024-8384 [CRITICAL] CWE-787 CVE-2024-8384: The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were de
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15.
nvd
CVE-2026-74990P3UNKNOWNfixed in Firefox ESR 153.1
CVE-2026-74990 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74990
Mozilla Foundation Security Advisory 2026-77
CVE: CVE-2026-74990
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.1
mozilla
CVE-2026-74987P3UNKNOWNfixed in Firefox ESR 140.14
CVE-2026-74987 Mozilla Foundation Security Advisory 2026-76: CVE-2026-74987
Mozilla Foundation Security Advisory 2026-76
CVE: CVE-2026-74987
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 140.14
mozilla
CVE-2026-74988P3UNKNOWNfixed in Firefox ESR 153.1
CVE-2026-74988 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74988
Mozilla Foundation Security Advisory 2026-77
CVE: CVE-2026-74988
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.1
mozilla
CVE-2026-74986P3UNKNOWNfixed in Firefox ESR 153.1
CVE-2026-74986 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74986
Mozilla Foundation Security Advisory 2026-77
CVE: CVE-2026-74986
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.1
mozilla
CVE-2026-74956P3UNKNOWNfixed in Firefox ESR 153.1
CVE-2026-74956 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74956
Mozilla Foundation Security Advisory 2026-77
CVE: CVE-2026-74956
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.1
mozilla
CVE-2026-8091P3UNKNOWNfixed in Firefox ESR 115.35.2
CVE-2026-8091 Mozilla Foundation Security Advisory 2026-42: CVE-2026-8091
Mozilla Foundation Security Advisory 2026-42
CVE: CVE-2026-8091
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 115.35.2
mozilla
CVE-2026-8094P3UNKNOWNfixed in Firefox ESR 140.10.2
CVE-2026-8094 Mozilla Foundation Security Advisory 2026-41: CVE-2026-8094
Mozilla Foundation Security Advisory 2026-41
CVE: CVE-2026-8094
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 140.10.2
mozilla
CVE-2026-74961P3UNKNOWNfixed in Firefox ESR 153.1
CVE-2026-74961 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74961
Mozilla Foundation Security Advisory 2026-77
CVE: CVE-2026-74961
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.1
mozilla
CVE-2026-74938P3UNKNOWNfixed in Firefox ESR 153.1
CVE-2026-74938 Mozilla Foundation Security Advisory 2026-77: CVE-2026-74938
Mozilla Foundation Security Advisory 2026-77
CVE: CVE-2026-74938
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 153.1
mozilla
CVE-2026-109704P3UNKNOWNfixed in Firefox ESR 153.5
CVE-2026-109704 Mozilla Foundation Security Advisory 2026-108: CVE-2026-109704
Mozilla Foundation Security Advisory 2026-108
CVE: CVE-2026-109704
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.5
mozilla
CVE-2026-92035P3CRITICALCVSS 9.6fixed in Firefox ESR 140.17
CVE-2026-92035 [CRITICAL] Mozilla Foundation Security Advisory 2026-99: CVE-2026-92035
Mozilla Foundation Security Advisory 2026-99
CVE: CVE-2026-92035
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 140.17
mozilla
CVE-2020-6831P3CRITICALCVSS 9.8fixed in 68.8.0≥ unspecified, < 68.82020-05-26
CVE-2020-6831 [CRITICAL] CWE-787 CVE-2020-6831: A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led
A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.
nvd
CVE-2026-16358P3UNKNOWNfixed in Firefox ESR 140.13
CVE-2026-16358 Mozilla Foundation Security Advisory 2026-70: CVE-2026-16358
Mozilla Foundation Security Advisory 2026-70
CVE: CVE-2026-16358
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 140.13
mozilla
CVE-2026-16375P3UNKNOWNfixed in Firefox ESR 140.13
CVE-2026-16375 Mozilla Foundation Security Advisory 2026-70: CVE-2026-16375
Mozilla Foundation Security Advisory 2026-70
CVE: CVE-2026-16375
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 140.13
mozilla
CVE-2026-100811P3CRITICALCVSS 9.6fixed in Firefox ESR 153.4
CVE-2026-100811 [CRITICAL] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100811
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100811
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-100819P3CRITICALCVSS 9.6fixed in Firefox ESR 153.4
CVE-2026-100819 [CRITICAL] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100819
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100819
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-92079P3UNKNOWNfixed in Firefox ESR 153.3
CVE-2026-92079 Mozilla Foundation Security Advisory 2026-93: CVE-2026-92079
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92079
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2018-5127P3HIGHCVSS 8.8≥ unspecified, < 52.72018-06-11
CVE-2018-5127 [HIGH] CWE-119 CVE-2018-5127: A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This res
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.
nvd
CVE-2017-7778P3CRITICALCVSS 9.8≥ unspecified, < 52.22018-06-11
CVE-2017-7778 [CRITICAL] CWE-119 CVE-2017-7778: A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
nvd