Known vulnerabilities in firefox-esr (Debian package) 78.6.0esr-1~deb10u1 - page 2

Vendor: Debian
Software: firefox-esr (Debian package)
Version: 78.6.0esr-1~deb10u1
Software CPE: cpe:2.3:o:debian:firefox-esr_debian_package:*:*:*:*:*:debian_linux:*:*
Website: https://www.debian.org/
Total vulnerabilities: 84
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting firefox-esr (Debian package) version 78.6.0esr-1~deb10u1 firefox-esr (Debian package) 78.6.0esr-1~deb10u1 is affected by 84 vulnerabilities: 2 critical, 42 high, 26 medium, 14 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61892 - Memory corruption
CVE-2022-28289		 CWE-119 High
No
No
 91.8.0esr-1~deb10u1, 91.8.0esr-1~deb11u1 05.04.2022 SB2022040526
SB2022040529
SB2022040628
and 24 more
#VU61890 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-28286		 CWE-451 Medium
No
No
 91.8.0esr-1~deb10u1, 91.8.0esr-1~deb11u1 05.04.2022 SB2022040526
SB2022040628
SB2022040629
and 23 more
#VU61889 - Resource Management Errors
CVE-2022-28285		 CWE-399 Low
No
No
 91.8.0esr-1~deb10u1, 91.8.0esr-1~deb11u1 05.04.2022 SB2022040526
SB2022040529
SB2022040628
and 26 more
#VU61109 - Improper Access Control
CVE-2022-26386		 CWE-284 Low
No
No
 91.7.0esr-1~deb10u1, 91.7.0esr-1~deb11u1 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 24 more
#VU61105 - Use After Free
CVE-2022-26381		 CWE-416 High
No
No
 91.7.0esr-1~deb10u1, 91.7.0esr-1~deb11u1 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU61104 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2022-26387		 CWE-367 Medium
No
No
 91.7.0esr-1~deb10u1, 91.7.0esr-1~deb11u1 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU61103 - Permissions, Privileges, and Access Controls
CVE-2022-26384		 CWE-264 Medium
No
No
 91.7.0esr-1~deb10u1, 91.7.0esr-1~deb11u1 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU61102 - Insufficient UI Warning of Dangerous Operations
CVE-2022-26383		 CWE-357 Low
No
No
 91.7.0esr-1~deb10u1, 91.7.0esr-1~deb11u1 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU61033 - Use After Free
CVE-2022-26486		 CWE-416 Critical
No
Exploited
 91.6.1esr-1~deb10u1, 91.6.1esr-1~deb11u1 05.03.2022 SB2022030501
SB2022030720
SB2022030724
and 26 more
#VU61032 - Use After Free
CVE-2022-26485		 CWE-416 Critical
Public exploit available
Exploited
 91.6.1esr-1~deb10u1, 91.6.1esr-1~deb11u1 05.03.2022 SB2022030501
SB2022030720
SB2022030724
and 28 more
#VU60414 - Improper control of a resource through its lifetime
CVE-2022-22763		 CWE-664 Medium
No
No
 91.6.0esr-1~deb10u1, 91.6.0esr-1~deb11u1 08.02.2022 SB2022020837
SB2022021015
SB2022021017
and 29 more
#VU60413 - Memory corruption
CVE-2022-22764		 CWE-119 High
No
No
 91.6.0esr-1~deb10u1, 91.6.0esr-1~deb11u1 08.02.2022 SB2022020837
SB2022021015
SB2022021017
and 30 more
#VU60411 - Security Features
CVE-2022-22761		 CWE-254 Medium
No
No
 91.6.0esr-1~deb10u1, 91.6.0esr-1~deb11u1 08.02.2022 SB2022020837
SB2022021015
SB2022021017
and 30 more
#VU60409 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22760		 CWE-200 Medium
No
No
 91.6.0esr-1~deb10u1, 91.6.0esr-1~deb11u1 08.02.2022 SB2022020837
SB2022021015
SB2022021017
and 31 more
#VU60406 - Permissions, Privileges, and Access Controls
CVE-2022-22759		 CWE-264 Medium
No
No
 91.6.0esr-1~deb10u1, 91.6.0esr-1~deb11u1 08.02.2022 SB2022020837
SB2022021015
SB2022021017
and 31 more
#VU60398 - Insufficient UI Warning of Dangerous Operations
CVE-2022-22756		 CWE-357 Medium
No
No
 91.6.0esr-1~deb10u1, 91.6.0esr-1~deb11u1 08.02.2022 SB2022020837
SB2022021015
SB2022021017
and 30 more
#VU60395 - Permissions, Privileges, and Access Controls
CVE-2022-22754		 CWE-264 High
No
No
 91.6.0esr-1~deb10u1, 91.6.0esr-1~deb11u1 08.02.2022 SB2022020837
SB2022021015
SB2022021017
and 29 more
#VU59381 - Security Features
CVE-2022-22739		 CWE-254 Low
No
No
 91.5.0esr-1~deb10u1, 91.5.0esr-1~deb11u1 11.01.2022 SB2022011114
SB2022011115
SB2022011726
and 27 more
#VU59371 - Heap-based Buffer Overflow
CVE-2022-22738		 CWE-122 High
No
No
 91.5.0esr-1~deb10u1, 91.5.0esr-1~deb11u1 11.01.2022 SB2022011114
SB2022011115
SB2022011726
and 27 more
#VU59369 - Improper Restriction of Rendered UI Layers or Frames
CVE-2022-22741		 CWE-1021 Medium
No
No
 91.5.0esr-1~deb10u1, 91.5.0esr-1~deb11u1 11.01.2022 SB2022011114
SB2022011115
SB2022011726
and 28 more


Showing elements 21 - 40 out of 84