Known vulnerabilities in Firefox ESR 128.2.0 - page 3
Vendor:
Mozilla
Software:
Firefox ESR
Version:
128.2.0
Software CPE:
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Website:
https://www.mozilla.org
Total vulnerabilities:
281
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
153.1.0
140.14.0
115.39.0
153.0
140.13.0
115.38.0
140.12.0
115.37.0
140.11.0
115.36.0
140.10.2
115.35.2
140.10.1
115.35.1
140.10.0
115.35.0
140.9.1
115.34.1
140.9.0
115.34.0
140.8.0
115.33.0
140.7.1
115.32.1
140.7.0
115.32.0
140.6.0
115.31.0
140.5.0
115.30.0
140.4.0
115.29.0
140.3.1
140.3.0
115.28.0
140.2.0
128.14.0
115.27.0
140.1.0
128.13.0
115.26.0
140.0
128.12.0
115.25.0
128.11.0
115.24.0
128.10.1
115.23.1
128.10.0
115.23.0
128.9.0
115.22.0
115.21.1
128.8.1
128.8.0
115.21.0
128.7.0
115.20.0
128.6.0
115.19.0
128.5.2
128.5.1
128.5.0
115.18.0
128.4.0
115.17.0
128.3.1
115.16.1
128.3.0
115.16.0
128.2.0
115.15.0
128.1.0
115.14.0
128.0
115.13.0
115.12.0
115.11.0
115.10.0
115.9.1
115.9.0
115.8.0
115.7.0
115.6.0
115.5.0
115.4.0
115.3.1
115.3.0
115.2.1
102.15.1
115.2.0
102.15.0
115.1.0
102.14.0
115.0.3
115.0.2
115.0.1
102.13.0
115.0
102.12.0
102.11.0
102.10.0
102.9.0
102.8.0
102.7.0
102.6.0
102.5.0
102.4.0
102.3.0
102.2.0
91.13.0
102.1.0
91.12.0
102.0.1
102.0
91.11.0
91.10.0
91.9.1
91.9.0
91.8.0
91.7.1
91.7.0
91.6.1
91.6.0
91.5.1
91.5.0
91.4.1
91.4.0
91.3.0
91.2.0
78.15.0
91.1.0
78.14.0
91.0.1
91.0
78.13.0
78.12.0
78.11.0
78.10.1
78.10.0
78.9.0
78.8.0
78.7.1
78.7.0
78.6.1
78.6.0
78.5.0
78.4.1
78.4.0
78.3.1
78.3.0
78.2.0
68.12.0
23
22
8.0
7.0
38.0.5
78.1.0
68.11.0
78.0.2
78.0.1
78.0
68.10.0
68.9.0
68.8.0
68.7.0
68.6.1
68.6.0
68.5.0
68.4.2
68.4.1
68.4.0
68.3.0
68.2.0
68.1.0
60.9.0
68.0.2
68.0.1
68.0
60.8.0
24.0.2
24.0.1
10.2
10.1
31.3
31.2
31.1
31.5
31.4
60.7.2
60.7.1
60.7.0
60.6.3
60.6.2
60.6.1
60.6.0
60.5.2
60.3.0
60.0.2
60.0.1
52.9.0
52.8.1
52.8.0
52.7.4
52.7.3
52.7.2
52.7.1
52.7.0
52.6.0
52.5.3
52.5.2
52.4.1
52.1.0
45.9.0
45.8.0
45.7.0
45.6.0
45.5.1
45.5.0
45.4.0
45.3.0
45.2.0
45.1.1
45.1.0
45.0.2
45.0.1
45.0
38.8.0
38.7.1
38.7.0
38.6.1
38.6.0
38.5.2
38.5.1
38.5.0
38.4.0
38.3.0
38.2.1
38.2.0
38.1.1
38.1.0
38.0.1
38.0
31.8.0
31.7.0
31.6.0
31.5.3
31.5.2
31.5.1
31.5.0
31.4.0
31.3.0
31.2.0
31.1.1
31.1.0
31.0
24.8.1
24.8.0
24.7.0
24.6.0
24.5.0
24.4.0
24.3.0
24.2.0
24.1.1
24.1.0
24.0
17.0.11
17.0.10
17.0.9
17.0.8
17.0.7
17.0.6
17.0.5
17.0.4
17.0.3
17.0.2
17.0.1
17.0
10.0.12
10.0.11
10.0.10
10.0.9
10.0.8
10.0.7
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
10.0
60.5.1
60.5.0
60.4.0
60.2.2
60.2.1
60.2.0
60.1.0
60.0
52.8
52.7
52.5.0
52.4.0
52.3.0
52.2.1
52.2.0
52.1.2
52.1.1
52.1
52.0.2
52.0.1
52.0
45.9
45.8
45.7
45.6
45.5
45.4
45.3
45.2
45.1
45
Vulnerabilities (281)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU138991 - Improper Privilege Management CVE-2026-16396 |
CWE-269 | Medium | 140.13.0 | 21.07.2026 |
SB2026072201 SB2026072301 SB2026072302 and 18 more |
||
| #VU138992 - Exposure of sensitive information to an unauthorized actor CVE-2026-16405 |
CWE-200 | Low | 140.13.0 | 21.07.2026 |
SB2026072201 SB2026072301 SB2026072302 and 18 more |
||
| #VU138993 - Memory corruption CVE-2026-16412 |
CWE-119 | High | 140.13.0 | 21.07.2026 |
SB2026072201 SB2026072301 SB2026072302 and 18 more |
||
| #VU137818 - Improper Access Control CVE-2026-15719 |
CWE-284 | High | 115.38.0, 140.13.0 | 16.07.2026 |
SB2026071604 SB2026072301 SB2026072442 and 17 more |
||
| #VU137817 - Access of Uninitialized Pointer CVE-2026-15718 |
CWE-824 | High | 115.38.0, 140.13.0 | 16.07.2026 |
SB2026071604 SB2026072301 SB2026072442 and 17 more |
||
| #VU134604 - Improper Access Control CVE-2026-12289 |
CWE-284 | High | 115.37.0, 140.12.0 | 16.06.2026 |
SB2026061653 SB2026061756 SB2026061757 and 28 more |
||
| #VU134605 - Memory corruption CVE-2026-12290 |
CWE-119 | High | 115.37.0, 140.12.0 | 16.06.2026 |
SB2026061653 SB2026061756 SB2026061757 and 29 more |
||
| #VU134606 - Use After Free CVE-2026-12291 |
CWE-416 | High | 115.37.0, 140.12.0 | 16.06.2026 |
SB2026061653 SB2026061756 SB2026061757 and 29 more |
||
| #VU134607 - Improper Access Control CVE-2026-12294 |
CWE-284 | High | 115.37.0, 140.12.0 | 16.06.2026 |
SB2026061653 SB2026061756 SB2026061757 and 29 more |
||
| #VU134608 - Improper Access Control CVE-2026-12295 |
CWE-284 | High | 115.37.0, 140.12.0 | 16.06.2026 |
SB2026061653 SB2026061756 SB2026061757 and 29 more |
||
| #VU134609 - Memory corruption CVE-2026-12297 |
CWE-119 | High | 115.37.0, 140.12.0 | 16.06.2026 |
SB2026061653 SB2026061756 SB2026061757 and 29 more |
||
| #VU134610 - Incorrect Calculation CVE-2026-12299 |
CWE-682 | High | 115.37.0, 140.12.0 | 16.06.2026 |
SB2026061653 SB2026061756 SB2026061757 and 28 more |
||
| #VU134611 - Protection Mechanism Failure CVE-2026-12302 |
CWE-693 | Medium | 115.37.0, 140.12.0 | 16.06.2026 |
SB2026061653 SB2026061756 SB2026061757 and 29 more |
||
| #VU134612 - Memory corruption CVE-2026-12330 |
CWE-119 | Medium | 115.37.0, 140.12.0 | 16.06.2026 |
SB2026061653 SB2026061756 SB2026061801 and 27 more |
||
| #VU134613 - Improper input validation CVE-2026-12325 |
CWE-20 | Medium | 115.37.0, 140.12.0 | 16.06.2026 |
SB2026061653 SB2026061756 SB2026061757 and 29 more |
||
| #VU134614 - Memory corruption CVE-2026-12328 |
CWE-119 | High | 115.37.0, 140.12.0 | 16.06.2026 |
SB2026061653 SB2026061756 SB2026061757 and 28 more |
||
| #VU131841 - Integer overflow CVE-2026-8956 |
CWE-190 | Medium | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052102 and 35 more |
||
| #VU131842 - Improper Privilege Management CVE-2026-8957 |
CWE-269 | Low | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052102 and 35 more |
||
| #VU131848 - Improper Privilege Management CVE-2026-8970 |
CWE-269 | Medium | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052102 and 35 more |
||
| #VU131849 - Memory corruption CVE-2026-8974 |
CWE-119 | High | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052102 and 35 more |
Showing elements 41 - 60 out of 281