Known vulnerabilities in firefox-esr (Debian package) - page 27

Vendor: Debian
Software CPE: cpe:2.3:o:debian:firefox-esr_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 755
Public exploits: 23
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox-esr (Debian package) firefox-esr (Debian package) is affected by 755 known vulnerabilities: 9 critical, 378 high, 243 medium, 125 low Critical High Medium Low

Vulnerabilities (755)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69336 - Memory corruption
CVE-2022-45421
CWE-119 High
No
No
102.5.0esr-1~deb11u1 15.11.2022 SB2022111528
SB2022111529
SB2022111645
and 36 more
#VU68408 - Memory corruption
CVE-2022-42932
CWE-119 High
No
No
102.4.0esr-1~deb11u1 18.10.2022 SB2022101840
SB2022101877
SB2022102007
and 30 more
#VU68407 - Resource Management Errors
CVE-2022-42929
CWE-399 Low
No
No
102.4.0esr-1~deb11u1 18.10.2022 SB2022101840
SB2022101877
SB2022102007
and 30 more
#VU68406 - Memory corruption
CVE-2022-42928
CWE-119 High
No
No
102.4.0esr-1~deb11u1 18.10.2022 SB2022101840
SB2022101877
SB2022102007
and 30 more
#VU68405 - Security Features
CVE-2022-42927
CWE-254 Medium
No
No
102.4.0esr-1~deb11u1 18.10.2022 SB2022101840
SB2022101877
SB2022102007
and 30 more
#VU67505 - Memory corruption
CVE-2022-40962
CWE-119 High
No
No
102.3.0esr-1~deb11u1 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU67504 - Improper input validation
CVE-2022-40957
CWE-20 Medium
No
No
102.3.0esr-1~deb11u1 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 28 more
#VU67503 - Security Features
CVE-2022-40956
CWE-254 Medium
No
No
102.3.0esr-1~deb11u1 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 30 more
#VU67502 - Security Features
CVE-2022-40958
CWE-254 Medium
No
No
102.3.0esr-1~deb11u1 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 30 more
#VU67501 - Use After Free
CVE-2022-40960
CWE-416 High
No
No
102.3.0esr-1~deb11u1 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU67500 - Security Features
CVE-2022-40959
CWE-254 Medium
No
No
102.3.0esr-1~deb11u1 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU66724 - Memory corruption
CVE-2022-38478
CWE-119 High
No
No
91.13.0esr-1~deb11u1 23.08.2022 SB2022082315
SB2022082316
SB2022082411
and 36 more
#VU66720 - Permissions, Privileges, and Access Controls
CVE-2022-38473
CWE-264 Medium
No
No
91.13.0esr-1~deb11u1 23.08.2022 SB2022082315
SB2022082316
SB2022082411
and 36 more
#VU66719 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-38472
CWE-451 Medium
No
No
91.13.0esr-1~deb11u1 23.08.2022 SB2022082315
SB2022082316
SB2022082411
and 35 more
#VU65795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36318
CWE-79 Medium
No
No
91.12.0esr-1~deb10u1, 91.12.0esr-1~deb11u1 26.07.2022 SB2022072633
SB2022072634
SB2022072815
and 36 more
#VU65793 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-36319
CWE-451 Low
No
No
91.12.0esr-1~deb10u1, 91.12.0esr-1~deb11u1 26.07.2022 SB2022072633
SB2022072634
SB2022072815
and 36 more
#VU64762 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-2200
CWE-94 Medium
No
No
91.11.0esr-1~deb10u1, 91.11.0esr-1~deb11u1 29.06.2022 SB2022062901
SB2022062902
SB2022062903
and 36 more
#VU64752 - Security Features
CVE-2022-34468
CWE-254 Medium
No
No
91.11.0esr-1~deb10u1, 91.11.0esr-1~deb11u1 28.06.2022 SB2022062901
SB2022062902
SB2022062903
and 37 more
#VU64751 - Use After Free
CVE-2022-34470
CWE-416 High
No
No
91.11.0esr-1~deb10u1, 91.11.0esr-1~deb11u1 28.06.2022 SB2022062901
SB2022062902
SB2022062903
and 37 more
#VU63881 - Security Features
CVE-2022-31744
CWE-254 Medium
No
No
91.11.0esr-1~deb10u1, 91.11.0esr-1~deb11u1 31.05.2022 SB2022053116
SB2022061323
SB2022062901
and 32 more


Showing elements 521 - 540 out of 755