Known vulnerabilities in firefox-esr (Debian package) - page 17

Vendor: Debian
Software CPE: cpe:2.3:o:debian:firefox-esr_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 755
Public exploits: 23
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox-esr (Debian package) firefox-esr (Debian package) is affected by 755 known vulnerabilities: 9 critical, 378 high, 243 medium, 125 low Critical High Medium Low

Vulnerabilities (755)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103611 - Memory corruption
CVE-2025-1017
CWE-119 High
No
No
128.7.0esr-1~deb12u1 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU103607 - Memory corruption
CVE-2025-1016
CWE-119 High
No
No
128.7.0esr-1~deb12u1 04.02.2025 SB2025020463
SB2025020464
SB2025020465
and 34 more
#VU102428 - Memory corruption
CVE-2025-0243
CWE-119 High
No
No
128.6.0esr-1~deb12u1 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 42 more
#VU102427 - Memory corruption
CVE-2025-0241
CWE-119 High
No
No
128.6.0esr-1~deb12u1 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 33 more
#VU102426 - Use After Free
CVE-2025-0240
CWE-416 Medium
No
No
128.6.0esr-1~deb12u1 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 33 more
#VU102425 - Improper Certificate Validation
CVE-2025-0239
CWE-295 Medium
No
No
128.6.0esr-1~deb12u1 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 33 more
#VU102424 - Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2025-0237
CWE-441 Low
No
No
128.6.0esr-1~deb12u1 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 33 more
#VU102423 - Memory corruption
CVE-2025-0242
CWE-119 High
No
No
128.6.0esr-1~deb12u1 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 47 more
#VU102422 - Use After Free
CVE-2025-0238
CWE-416 High
No
No
128.6.0esr-1~deb12u1 07.01.2025 SB2025010749
SB2025010801
SB2025010802
and 38 more
#VU100959 - Memory corruption
CVE-2024-11699
CWE-119 High
No
No
128.5.0esr-1~deb12u1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100957 - Data Handling
CVE-2024-11697
CWE-19 Low
No
No
128.5.0esr-1~deb12u1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 43 more
#VU100956 - Error Handling
CVE-2024-11696
CWE-388 Medium
No
No
128.5.0esr-1~deb12u1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100955 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-11695
CWE-451 Medium
No
No
128.5.0esr-1~deb12u1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100953 - Insufficient UI Warning of Dangerous Operations
CVE-2024-11692
CWE-357 Low
No
No
128.5.0esr-1~deb12u1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 43 more
#VU100952 - Security Features
CVE-2024-11694
CWE-254 Medium
No
No
128.5.0esr-1~deb12u1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 41 more
#VU99486 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-10462
CWE-451 Medium
No
No
128.4.0esr-1~deb12u1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10461
CWE-79 Medium
No
No
128.4.0esr-1~deb12u1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99484 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10460
CWE-357 Low
No
No
128.4.0esr-1~deb12u1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99481 - Use After Free
CVE-2024-10459
CWE-416 High
No
No
128.4.0esr-1~deb12u1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99480 - Permissions, Privileges, and Access Controls
CVE-2024-10458
CWE-264 Medium
No
No
128.4.0esr-1~deb12u1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more


Showing elements 321 - 340 out of 755