Known vulnerabilities in Firefox ESR
Vendor:
Mozilla
Software:
Firefox ESR
Software CPE:
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Website:
https://www.mozilla.org
Total vulnerabilities:
1137
Public exploits:
31
Known exploited (KEV):
13
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
153.3.0
140.16.0
115.41.0
153.2.0
140.15.0
115.40.0
153.1.0
140.14.0
115.39.0
153.0
140.13.0
115.38.0
140.12.0
115.37.0
140.11.0
115.36.0
140.10.2
115.35.2
140.10.1
115.35.1
140.10.0
115.35.0
140.9.1
115.34.1
140.9.0
115.34.0
140.8.0
115.33.0
140.7.1
115.32.1
140.7.0
115.32.0
140.6.0
115.31.0
140.5.0
115.30.0
140.4.0
115.29.0
140.3.1
140.3.0
115.28.0
140.2.0
128.14.0
115.27.0
140.1.0
128.13.0
115.26.0
140.0
128.12.0
115.25.0
128.11.0
115.24.0
128.10.1
115.23.1
128.10.0
115.23.0
128.9.0
115.22.0
115.21.1
128.8.1
128.8.0
115.21.0
128.7.0
115.20.0
128.6.0
115.19.0
128.5.2
128.5.1
128.5.0
115.18.0
128.4.0
115.17.0
128.3.1
115.16.1
128.3.0
115.16.0
128.2.0
115.15.0
128.1.0
115.14.0
128.0
115.13.0
115.12.0
115.11.0
115.10.0
115.9.1
115.9.0
115.8.0
115.7.0
115.6.0
115.5.0
115.4.0
115.3.1
115.3.0
115.2.1
102.15.1
115.2.0
102.15.0
115.1.0
102.14.0
115.0.3
115.0.2
115.0.1
102.13.0
115.0
102.12.0
102.11.0
102.10.0
102.9.0
102.8.0
102.7.0
102.6.0
102.5.0
102.4.0
102.3.0
102.2.0
91.13.0
102.1.0
91.12.0
102.0.1
102.0
91.11.0
91.10.0
91.9.1
91.9.0
91.8.0
91.7.1
91.7.0
91.6.1
91.6.0
91.5.1
91.5.0
91.4.1
91.4.0
91.3.0
91.2.0
78.15.0
91.1.0
78.14.0
91.0.1
91.0
78.13.0
78.12.0
78.11.0
78.10.1
78.10.0
78.9.0
78.8.0
78.7.1
78.7.0
78.6.1
78.6.0
78.5.0
78.4.1
78.4.0
78.3.1
78.3.0
78.2.0
68.12.0
23
22
8.0
7.0
38.0.5
78.1.0
68.11.0
78.0.2
78.0.1
78.0
68.10.0
68.9.0
68.8.0
68.7.0
68.6.1
68.6.0
68.5.0
68.4.2
68.4.1
68.4.0
68.3.0
68.2.0
68.1.0
60.9.0
68.0.2
68.0.1
68.0
60.8.0
24.0.2
24.0.1
10.2
10.1
31.3
31.2
31.1
31.5
31.4
60.7.2
60.7.1
60.7.0
60.6.3
60.6.2
60.6.1
60.6.0
60.5.2
60.3.0
60.0.2
60.0.1
52.9.0
52.8.1
52.8.0
52.7.4
52.7.3
52.7.2
52.7.1
52.7.0
52.6.0
52.5.3
52.5.2
52.4.1
52.1.0
45.9.0
45.8.0
45.7.0
45.6.0
45.5.1
45.5.0
45.4.0
45.3.0
45.2.0
45.1.1
45.1.0
45.0.2
45.0.1
45.0
38.8.0
38.7.1
38.7.0
38.6.1
38.6.0
38.5.2
38.5.1
38.5.0
38.4.0
38.3.0
38.2.1
38.2.0
38.1.1
38.1.0
38.0.1
38.0
31.8.0
31.7.0
31.6.0
31.5.3
31.5.2
31.5.1
31.5.0
31.4.0
31.3.0
31.2.0
31.1.1
31.1.0
31.0
24.8.1
24.8.0
24.7.0
24.6.0
24.5.0
24.4.0
24.3.0
24.2.0
24.1.1
24.1.0
24.0
17.0.11
17.0.10
17.0.9
17.0.8
17.0.7
17.0.6
17.0.5
17.0.4
17.0.3
17.0.2
17.0.1
17.0
10.0.12
10.0.11
10.0.10
10.0.9
10.0.8
10.0.7
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
10.0
60.5.1
60.5.0
60.4.0
60.2.2
60.2.1
60.2.0
60.1.0
60.0
52.8
52.7
52.5.0
52.4.0
52.3.0
52.2.1
52.2.0
52.1.2
52.1.1
52.1
52.0.2
52.0.1
52.0
45.9
45.8
45.7
45.6
45.5
45.4
45.3
45.2
45.1
45
Vulnerabilities (1137)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU150051 - Use After Free CVE-2026-92027 |
CWE-416 | Medium | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150052 - Use After Free CVE-2026-92028 |
CWE-416 | Medium | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150047 - Use After Free CVE-2026-92022 |
CWE-416 | Medium | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150048 - Use After Free CVE-2026-92023 |
CWE-416 | Medium | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150049 - Use After Free CVE-2026-92024 |
CWE-416 | Medium | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150050 - Use After Free CVE-2026-92025 |
CWE-416 | Medium | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150044 - Protection Mechanism Failure CVE-2026-92018 |
CWE-693 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150045 - Protection Mechanism Failure CVE-2026-92019 |
CWE-693 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150046 - Improper input validation CVE-2026-92020 |
CWE-20 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150040 - Improper input validation CVE-2026-92013 |
CWE-20 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150041 - Improper input validation CVE-2026-92014 |
CWE-20 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150042 - Improper Privilege Management CVE-2026-92015 |
CWE-269 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150043 - Improper Privilege Management CVE-2026-92017 |
CWE-269 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150037 - Improper input validation CVE-2026-92010 |
CWE-20 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150038 - Improper input validation CVE-2026-92011 |
CWE-20 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150039 - Improper input validation CVE-2026-92012 |
CWE-20 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150034 - Improper input validation CVE-2026-92007 |
CWE-20 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150035 - Improper input validation CVE-2026-92008 |
CWE-20 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150036 - Improper input validation CVE-2026-92009 |
CWE-20 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
||
| #VU150033 - Improper input validation CVE-2026-92006 |
CWE-20 | High | 115.41.0, 140.16.0, 153.3.0 | 15.09.2026 |
SB2026091579 SB20260917225 |
Showing elements 1 - 20 out of 1137