Mozilla Firefox Esr vulnerabilities
1,297 known vulnerabilities affecting mozilla/firefox_esr.
Total CVEs
1,297
CISA KEV
9
actively exploited
Public exploits
20
Exploited in wild
16
Severity breakdown
CRITICAL214HIGH400MEDIUM327LOW6UNKNOWN350
Vulnerabilities
Page 9 of 65
CVE-2026-8950P3CRITICALCVSS 9.3fixed in Firefox ESR 140.11
CVE-2026-8950 [CRITICAL] Mozilla Foundation Security Advisory 2026-48: CVE-2026-8950
Mozilla Foundation Security Advisory 2026-48
CVE: CVE-2026-8950
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 140.11
mozilla
CVE-2021-24002P3HIGHCVSS 8.8fixed in 78.10≥ unspecified, < 78.102021-06-24
CVE-2021-24002 [HIGH] CWE-74 CVE-2021-24002: When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines
When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
nvd
CVE-2023-0767P3HIGHCVSS 8.8fixed in 102.8≥ unspecified, < 102.82023-06-02
CVE-2023-0767 [HIGH] CVE-2023-0767: An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memor
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
nvd
CVE-2026-8957P3MEDIUMCVSS 6.5fixed in Firefox ESR 140.11
CVE-2026-8957 [MEDIUM] Mozilla Foundation Security Advisory 2026-48: CVE-2026-8957
Mozilla Foundation Security Advisory 2026-48
CVE: CVE-2026-8957
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 140.11
mozilla
CVE-2024-8382P3HIGHCVSS 8.8fixed in 115.15≥ 128.0, < 128.2+2 more2024-09-03
CVE-2024-8382 [HIGH] CWE-273 CVE-2024-8382: Internal browser event interfaces were exposed to web content when privileged EventHandler listener
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had been used, such as when a user opened the Dev Tools consol
nvd
CVE-2026-100773P3HIGHCVSS 8.8fixed in Firefox ESR 115.42
CVE-2026-100773 [HIGH] Mozilla Foundation Security Advisory 2026-98: CVE-2026-100773
Mozilla Foundation Security Advisory 2026-98
CVE: CVE-2026-100773
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 115.42
mozilla
CVE-2026-100791P3HIGHCVSS 8.8fixed in Firefox ESR 140.17
CVE-2026-100791 [HIGH] Mozilla Foundation Security Advisory 2026-99: CVE-2026-100791
Mozilla Foundation Security Advisory 2026-99
CVE: CVE-2026-100791
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 140.17
mozilla
CVE-2026-92006P3HIGHCVSS 8.8fixed in Firefox ESR 153.3
CVE-2026-92006 [HIGH] Mozilla Foundation Security Advisory 2026-93: CVE-2026-92006
Mozilla Foundation Security Advisory 2026-93
CVE: CVE-2026-92006
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.3
mozilla
CVE-2026-100767P3HIGHCVSS 8.8fixed in Firefox ESR 115.42
CVE-2026-100767 [HIGH] Mozilla Foundation Security Advisory 2026-98: CVE-2026-100767
Mozilla Foundation Security Advisory 2026-98
CVE: CVE-2026-100767
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 115.42
mozilla
CVE-2026-100779P3HIGHCVSS 8.8fixed in Firefox ESR 153.4
CVE-2026-100779 [HIGH] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100779
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100779
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-100784P3HIGHCVSS 8.8fixed in Firefox ESR 140.17
CVE-2026-100784 [HIGH] Mozilla Foundation Security Advisory 2026-99: CVE-2026-100784
Mozilla Foundation Security Advisory 2026-99
CVE: CVE-2026-100784
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 140.17
mozilla
CVE-2026-100777P3HIGHCVSS 8.8fixed in Firefox ESR 115.42
CVE-2026-100777 [HIGH] Mozilla Foundation Security Advisory 2026-98: CVE-2026-100777
Mozilla Foundation Security Advisory 2026-98
CVE: CVE-2026-100777
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 115.42
mozilla
CVE-2026-100757P3HIGHCVSS 8.8fixed in Firefox ESR 115.42
CVE-2026-100757 [HIGH] Mozilla Foundation Security Advisory 2026-98: CVE-2026-100757
Mozilla Foundation Security Advisory 2026-98
CVE: CVE-2026-100757
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 115.42
mozilla
CVE-2026-100790P3HIGHCVSS 8.8fixed in Firefox ESR 140.17
CVE-2026-100790 [HIGH] Mozilla Foundation Security Advisory 2026-99: CVE-2026-100790
Mozilla Foundation Security Advisory 2026-99
CVE: CVE-2026-100790
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 140.17
mozilla
CVE-2026-100785P3HIGHCVSS 8.8fixed in Firefox ESR 115.42
CVE-2026-100785 [HIGH] Mozilla Foundation Security Advisory 2026-98: CVE-2026-100785
Mozilla Foundation Security Advisory 2026-98
CVE: CVE-2026-100785
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 115.42
mozilla
CVE-2026-100774P3HIGHCVSS 8.8fixed in Firefox ESR 153.4
CVE-2026-100774 [HIGH] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100774
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100774
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-100780P3HIGHCVSS 8.8fixed in Firefox ESR 115.42
CVE-2026-100780 [HIGH] Mozilla Foundation Security Advisory 2026-98: CVE-2026-100780
Mozilla Foundation Security Advisory 2026-98
CVE: CVE-2026-100780
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 115.42
mozilla
CVE-2026-100789P3HIGHCVSS 8.8fixed in Firefox ESR 153.4
CVE-2026-100789 [HIGH] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100789
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100789
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-100769P3HIGHCVSS 8.8fixed in Firefox ESR 153.4
CVE-2026-100769 [HIGH] Mozilla Foundation Security Advisory 2026-100: CVE-2026-100769
Mozilla Foundation Security Advisory 2026-100
CVE: CVE-2026-100769
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 153.4
mozilla
CVE-2026-100776P3HIGHCVSS 8.8fixed in Firefox ESR 140.17
CVE-2026-100776 [HIGH] Mozilla Foundation Security Advisory 2026-99: CVE-2026-100776
Mozilla Foundation Security Advisory 2026-99
CVE: CVE-2026-100776
Product: Firefox ESR
Impact: moderate
Fixed in: Firefox ESR 140.17
mozilla