Known vulnerabilities in firefox-esr (Debian package) 68.4.1esr-1~deb10u1 - page 5

Vendor: Debian
Software: firefox-esr (Debian package)
Version: 68.4.1esr-1~deb10u1
Software CPE: cpe:2.3:o:debian:firefox-esr_debian_package:*:*:*:*:*:debian_linux:*:*
Website: https://www.debian.org/
Total vulnerabilities: 138
Public exploits: 7
Known exploited (KEV): 4
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting firefox-esr (Debian package) version 68.4.1esr-1~deb10u1 firefox-esr (Debian package) 68.4.1esr-1~deb10u1 is affected by 138 vulnerabilities: 4 critical, 68 high, 46 medium, 20 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50025 - Memory corruption
CVE-2021-23964		 CWE-119 High
No
No
 78.7.0esr-1~deb10u1 26.01.2021 SB2021012626
SB2021012629
SB2021012730
and 18 more
#VU50024 - Memory corruption
CVE-2021-23960		 CWE-119 High
No
No
 78.7.0esr-1~deb10u1 26.01.2021 SB2021012626
SB2021012629
SB2021012730
and 18 more
#VU50022 - Type confusion
CVE-2021-23954		 CWE-843 High
No
No
 78.7.0esr-1~deb10u1 26.01.2021 SB2021012626
SB2021012629
SB2021012730
and 19 more
#VU49300 - Use After Free
CVE-2020-16044		 CWE-416 High
No
No
 78.6.1esr-1~deb10u1 06.01.2021 SB2021010608
SB2021010702
SB2021010703
and 31 more
#VU49024 - Memory corruption
CVE-2020-35113		 CWE-119 High
No
No
 78.6.0esr-1~deb10u1 15.12.2020 SB2020121531
SB2020121533
SB2020121625
and 21 more
#VU49022 - Exposure of sensitive information to an unauthorized actor
CVE-2020-35111		 CWE-200 Medium
No
No
 78.6.0esr-1~deb10u1 15.12.2020 SB2020121531
SB2020121533
SB2020121625
and 20 more
#VU49020 - Permissions, Privileges, and Access Controls
CVE-2020-26978		 CWE-264 Medium
No
No
 78.6.0esr-1~deb10u1 15.12.2020 SB2020121531
SB2020121533
SB2020121625
and 20 more
#VU49016 - Type confusion
CVE-2020-26974		 CWE-843 High
No
No
 78.6.0esr-1~deb10u1 15.12.2020 SB2020121531
SB2020121533
SB2020121625
and 20 more
#VU49015 - Improper input validation
CVE-2020-26973		 CWE-20 Medium
No
No
 78.6.0esr-1~deb10u1 15.12.2020 SB2020121531
SB2020121533
SB2020121625
and 20 more
#VU49013 - Heap-based Buffer Overflow
CVE-2020-26971		 CWE-122 High
No
No
 78.6.0esr-1~deb10u1 15.12.2020 SB2020121531
SB2020121533
SB2020121625
and 22 more
#VU48790 - Use of Uninitialized Resource
CVE-2020-16042		 CWE-908 Medium
No
No
 78.6.0esr-1~deb10u1 02.12.2020 SB2020120501
SB2020120703
SB2020120912
and 29 more
#VU48469 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26965		 CWE-200 Low
No
No
 78.5.0esr-1~deb10u1 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48466 - Improperly Implemented Security Check for Standard
CVE-2020-26961		 CWE-358 Medium
No
No
 78.5.0esr-1~deb10u1 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48465 - Use After Free
CVE-2020-26960		 CWE-416 High
No
No
 78.5.0esr-1~deb10u1 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48464 - Use After Free
CVE-2020-26959		 CWE-416 Medium
No
No
 78.5.0esr-1~deb10u1 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48463 - Permissions, Privileges, and Access Controls
CVE-2020-26958		 CWE-264 Medium
No
No
 78.5.0esr-1~deb10u1 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26956		 CWE-79 Medium
No
No
 78.5.0esr-1~deb10u1 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48461 -
CVE-2020-26953		 Medium
No
No
 78.5.0esr-1~deb10u1 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48460 - Origin Validation Error
CVE-2020-16012		 CWE-346 Medium
Public exploit available
No
 78.5.0esr-1~deb10u1 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 34 more
#VU48458 - Improper input validation
CVE-2020-26951		 CWE-20 Medium
No
No
 78.5.0esr-1~deb10u1 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 25 more


Showing elements 81 - 100 out of 138