Known vulnerabilities in Firefox ESR 128.12.0
Vendor:
Mozilla
Software:
Firefox ESR
Version:
128.12.0
Software CPE:
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Website:
https://www.mozilla.org
Total vulnerabilities:
204
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
153.2.0
140.15.0
115.40.0
153.1.0
140.14.0
115.39.0
153.0
140.13.0
115.38.0
140.12.0
115.37.0
140.11.0
115.36.0
140.10.2
115.35.2
140.10.1
115.35.1
140.10.0
115.35.0
140.9.1
115.34.1
140.9.0
115.34.0
140.8.0
115.33.0
140.7.1
115.32.1
140.7.0
115.32.0
140.6.0
115.31.0
140.5.0
115.30.0
140.4.0
115.29.0
140.3.1
140.3.0
115.28.0
140.2.0
128.14.0
115.27.0
140.1.0
128.13.0
115.26.0
140.0
128.12.0
115.25.0
128.11.0
115.24.0
128.10.1
115.23.1
128.10.0
115.23.0
128.9.0
115.22.0
115.21.1
128.8.1
128.8.0
115.21.0
128.7.0
115.20.0
128.6.0
115.19.0
128.5.2
128.5.1
128.5.0
115.18.0
128.4.0
115.17.0
128.3.1
115.16.1
128.3.0
115.16.0
128.2.0
115.15.0
128.1.0
115.14.0
128.0
115.13.0
115.12.0
115.11.0
115.10.0
115.9.1
115.9.0
115.8.0
115.7.0
115.6.0
115.5.0
115.4.0
115.3.1
115.3.0
115.2.1
102.15.1
115.2.0
102.15.0
115.1.0
102.14.0
115.0.3
115.0.2
115.0.1
102.13.0
115.0
102.12.0
102.11.0
102.10.0
102.9.0
102.8.0
102.7.0
102.6.0
102.5.0
102.4.0
102.3.0
102.2.0
91.13.0
102.1.0
91.12.0
102.0.1
102.0
91.11.0
91.10.0
91.9.1
91.9.0
91.8.0
91.7.1
91.7.0
91.6.1
91.6.0
91.5.1
91.5.0
91.4.1
91.4.0
91.3.0
91.2.0
78.15.0
91.1.0
78.14.0
91.0.1
91.0
78.13.0
78.12.0
78.11.0
78.10.1
78.10.0
78.9.0
78.8.0
78.7.1
78.7.0
78.6.1
78.6.0
78.5.0
78.4.1
78.4.0
78.3.1
78.3.0
78.2.0
68.12.0
23
22
8.0
7.0
38.0.5
78.1.0
68.11.0
78.0.2
78.0.1
78.0
68.10.0
68.9.0
68.8.0
68.7.0
68.6.1
68.6.0
68.5.0
68.4.2
68.4.1
68.4.0
68.3.0
68.2.0
68.1.0
60.9.0
68.0.2
68.0.1
68.0
60.8.0
24.0.2
24.0.1
10.2
10.1
31.3
31.2
31.1
31.5
31.4
60.7.2
60.7.1
60.7.0
60.6.3
60.6.2
60.6.1
60.6.0
60.5.2
60.3.0
60.0.2
60.0.1
52.9.0
52.8.1
52.8.0
52.7.4
52.7.3
52.7.2
52.7.1
52.7.0
52.6.0
52.5.3
52.5.2
52.4.1
52.1.0
45.9.0
45.8.0
45.7.0
45.6.0
45.5.1
45.5.0
45.4.0
45.3.0
45.2.0
45.1.1
45.1.0
45.0.2
45.0.1
45.0
38.8.0
38.7.1
38.7.0
38.6.1
38.6.0
38.5.2
38.5.1
38.5.0
38.4.0
38.3.0
38.2.1
38.2.0
38.1.1
38.1.0
38.0.1
38.0
31.8.0
31.7.0
31.6.0
31.5.3
31.5.2
31.5.1
31.5.0
31.4.0
31.3.0
31.2.0
31.1.1
31.1.0
31.0
24.8.1
24.8.0
24.7.0
24.6.0
24.5.0
24.4.0
24.3.0
24.2.0
24.1.1
24.1.0
24.0
17.0.11
17.0.10
17.0.9
17.0.8
17.0.7
17.0.6
17.0.5
17.0.4
17.0.3
17.0.2
17.0.1
17.0
10.0.12
10.0.11
10.0.10
10.0.9
10.0.8
10.0.7
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
10.0
60.5.1
60.5.0
60.4.0
60.2.2
60.2.1
60.2.0
60.1.0
60.0
52.8
52.7
52.5.0
52.4.0
52.3.0
52.2.1
52.2.0
52.1.2
52.1.1
52.1
52.0.2
52.0.1
52.0
45.9
45.8
45.7
45.6
45.5
45.4
45.3
45.2
45.1
45
Vulnerabilities (204)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146610 - Memory corruption CVE-2026-84145 |
CWE-119 | High | 115.40.0, 140.15.0, 153.2.0 | 01.09.2026 |
SB2026090144 SB2026090308 SB2026091360 and 2 more |
||
| #VU146609 - NULL Pointer Dereference CVE-2026-84131 |
CWE-476 | High | 115.40.0, 140.15.0, 153.2.0 | 01.09.2026 |
SB2026090144 SB2026090308 SB2026091360 and 2 more |
||
| #VU146608 - Use After Free CVE-2026-84121 |
CWE-416 | High | 115.40.0, 140.15.0, 153.2.0 | 01.09.2026 |
SB2026090144 SB2026090308 SB2026091360 and 2 more |
||
| #VU146606 - Use After Free CVE-2026-84119 |
CWE-416 | High | 115.40.0, 140.15.0, 153.2.0 | 01.09.2026 |
SB2026090144 SB2026090308 SB2026091360 and 2 more |
||
| #VU146607 - Use After Free CVE-2026-84120 |
CWE-416 | High | 115.40.0, 140.15.0, 153.2.0 | 01.09.2026 |
SB2026090144 SB2026090308 SB2026091360 and 2 more |
||
| #VU144097 - Improper Access Control CVE-2026-75874 |
CWE-284 | High | 115.40.0, 140.15.0, 153.2.0 | 18.08.2026 |
SB2026081838 SB2026081989 SB2026082141 and 5 more |
||
| #VU144057 - Memory corruption CVE-2026-74990 |
CWE-119 | Medium | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 30 more |
||
| #VU144054 - Use After Free CVE-2026-74969 |
CWE-416 | High | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 22 more |
||
| #VU144055 - Use After Free CVE-2026-74973 |
CWE-416 | High | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 30 more |
||
| #VU144056 - Improper Access Control CVE-2026-74974 |
CWE-284 | Medium | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 30 more |
||
| #VU144051 - Exposure of sensitive information to an unauthorized actor CVE-2026-74945 |
CWE-200 | Medium | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 30 more |
||
| #VU144052 - Memory corruption CVE-2026-74946 |
CWE-119 | High | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 28 more |
||
| #VU144053 - Exposure of sensitive information to an unauthorized actor CVE-2026-74948 |
CWE-200 | Medium | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 28 more |
||
| #VU144048 - Use After Free CVE-2026-74940 |
CWE-416 | High | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 28 more |
||
| #VU144049 - Improper Access Control CVE-2026-74942 |
CWE-284 | High | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 30 more |
||
| #VU144050 - Use After Free CVE-2026-74943 |
CWE-416 | High | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 24 more |
||
| #VU144045 - Improper Access Control CVE-2026-74934 |
CWE-284 | Medium | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 30 more |
||
| #VU144046 - Improper Access Control CVE-2026-74935 |
CWE-284 | High | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 30 more |
||
| #VU144047 - Improper Access Control CVE-2026-74939 |
CWE-284 | High | 115.39.0, 140.14.0, 153.1.0 | 18.08.2026 |
SB2026081838 SB2026081987 SB2026081988 and 30 more |
||
| #VU138964 - Improper Access Control CVE-2026-16349 |
CWE-284 | Medium | 115.38.0, 140.13.0 | 21.07.2026 |
SB2026072201 SB2026072301 SB2026072302 and 18 more |
Showing elements 1 - 20 out of 204