Known vulnerabilities in firefox-esr (Debian package) - page 19

Vendor: Debian
Software CPE: cpe:2.3:o:debian:firefox-esr_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 905
Public exploits: 23
Known exploited (KEV): 11

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox-esr (Debian package) firefox-esr (Debian package) is affected by 905 known vulnerabilities: 9 critical, 447 high, 303 medium, 146 low Critical High Medium Low

Vulnerabilities (905)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115733 - Memory corruption
CVE-2025-10537
CWE-119 High
No
No
140.3.0esr-1~deb12u1, 140.3.0esr-1~deb13u1 17.09.2025 SB2025091769
SB2025091770
SB2025091771
and 36 more
#VU115732 - Exposure of sensitive information to an unauthorized actor
CVE-2025-10536
CWE-200 Medium
No
No
140.3.0esr-1~deb12u1, 140.3.0esr-1~deb13u1 17.09.2025 SB2025091769
SB2025091770
SB2025091771
and 36 more
#VU114387 - Use of Uninitialized Variable
CVE-2025-9181
CWE-457 High
No
No
128.14.0esr-1~deb12u1, 128.14.0esr-1~deb13u1 22.08.2025 SB2025081946
SB2025082223
SB2025082301
and 33 more
#VU114227 - Memory corruption
CVE-2025-9180
CWE-119 High
No
No
128.14.0esr-1~deb12u1, 128.14.0esr-1~deb13u1 19.08.2025 SB2025081946
SB2025082223
SB2025082301
and 33 more
#VU114226 - Security Features
CVE-2025-9185
CWE-254 Medium
No
No
128.14.0esr-1~deb12u1, 128.14.0esr-1~deb13u1 19.08.2025 SB2025081946
SB2025082223
SB2025082301
and 37 more
#VU114225 - Memory corruption
CVE-2025-9179
CWE-119 High
No
No
128.14.0esr-1~deb12u1, 128.14.0esr-1~deb13u1 19.08.2025 SB2025081946
SB2025082223
SB2025082301
and 33 more
#VU113145 - Memory corruption
CVE-2025-8035
CWE-119 High
No
No
128.13.0esr-1~deb12u1 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113144 - Protection Mechanism Failure
CVE-2025-8032
CWE-693 Medium
No
No
128.13.0esr-1~deb12u1 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113143 - Exposure of sensitive information to an unauthorized actor
CVE-2025-8031
CWE-200 Low
No
No
128.13.0esr-1~deb12u1 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113142 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8030
CWE-94 Medium
No
No
128.13.0esr-1~deb12u1 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113141 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8029
CWE-94 Medium
No
No
128.13.0esr-1~deb12u1 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113140 - Memory corruption
CVE-2025-8034
CWE-119 High
No
No
128.13.0esr-1~deb12u1 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 39 more
#VU113139 - NULL Pointer Dereference
CVE-2025-8033
CWE-476 Low
No
No
128.13.0esr-1~deb12u1 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113138 - Incorrect Calculation
CVE-2025-8028
CWE-682 High
No
No
128.13.0esr-1~deb12u1 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 39 more
#VU113137 - Buffer over-read
CVE-2025-8027
CWE-126 High
No
No
128.13.0esr-1~deb12u1 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU111889 - Protection Mechanism Failure
CVE-2025-6430
CWE-693 Medium
No
No
128.12.0esr-1~deb12u1 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111888 - Improper input validation
CVE-2025-6429
CWE-20 Low
No
No
128.12.0esr-1~deb12u1 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111886 - Exposure of sensitive information to an unauthorized actor
CVE-2025-6425
CWE-200 Medium
No
No
128.12.0esr-1~deb12u1 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111885 - Use After Free
CVE-2025-6424
CWE-416 High
No
No
128.12.0esr-1~deb12u1 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU109857 - Error Handling
CVE-2025-5263
CWE-388 Medium
No
No
128.11.0esr-1~deb12u1 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more


Showing elements 361 - 380 out of 905