Known vulnerabilities in Firefox ESR 128.2.0 - page 4
Vendor:
Mozilla
Software:
Firefox ESR
Version:
128.2.0
Software CPE:
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Website:
https://www.mozilla.org
Total vulnerabilities:
281
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
153.1.0
140.14.0
115.39.0
153.0
140.13.0
115.38.0
140.12.0
115.37.0
140.11.0
115.36.0
140.10.2
115.35.2
140.10.1
115.35.1
140.10.0
115.35.0
140.9.1
115.34.1
140.9.0
115.34.0
140.8.0
115.33.0
140.7.1
115.32.1
140.7.0
115.32.0
140.6.0
115.31.0
140.5.0
115.30.0
140.4.0
115.29.0
140.3.1
140.3.0
115.28.0
140.2.0
128.14.0
115.27.0
140.1.0
128.13.0
115.26.0
140.0
128.12.0
115.25.0
128.11.0
115.24.0
128.10.1
115.23.1
128.10.0
115.23.0
128.9.0
115.22.0
115.21.1
128.8.1
128.8.0
115.21.0
128.7.0
115.20.0
128.6.0
115.19.0
128.5.2
128.5.1
128.5.0
115.18.0
128.4.0
115.17.0
128.3.1
115.16.1
128.3.0
115.16.0
128.2.0
115.15.0
128.1.0
115.14.0
128.0
115.13.0
115.12.0
115.11.0
115.10.0
115.9.1
115.9.0
115.8.0
115.7.0
115.6.0
115.5.0
115.4.0
115.3.1
115.3.0
115.2.1
102.15.1
115.2.0
102.15.0
115.1.0
102.14.0
115.0.3
115.0.2
115.0.1
102.13.0
115.0
102.12.0
102.11.0
102.10.0
102.9.0
102.8.0
102.7.0
102.6.0
102.5.0
102.4.0
102.3.0
102.2.0
91.13.0
102.1.0
91.12.0
102.0.1
102.0
91.11.0
91.10.0
91.9.1
91.9.0
91.8.0
91.7.1
91.7.0
91.6.1
91.6.0
91.5.1
91.5.0
91.4.1
91.4.0
91.3.0
91.2.0
78.15.0
91.1.0
78.14.0
91.0.1
91.0
78.13.0
78.12.0
78.11.0
78.10.1
78.10.0
78.9.0
78.8.0
78.7.1
78.7.0
78.6.1
78.6.0
78.5.0
78.4.1
78.4.0
78.3.1
78.3.0
78.2.0
68.12.0
23
22
8.0
7.0
38.0.5
78.1.0
68.11.0
78.0.2
78.0.1
78.0
68.10.0
68.9.0
68.8.0
68.7.0
68.6.1
68.6.0
68.5.0
68.4.2
68.4.1
68.4.0
68.3.0
68.2.0
68.1.0
60.9.0
68.0.2
68.0.1
68.0
60.8.0
24.0.2
24.0.1
10.2
10.1
31.3
31.2
31.1
31.5
31.4
60.7.2
60.7.1
60.7.0
60.6.3
60.6.2
60.6.1
60.6.0
60.5.2
60.3.0
60.0.2
60.0.1
52.9.0
52.8.1
52.8.0
52.7.4
52.7.3
52.7.2
52.7.1
52.7.0
52.6.0
52.5.3
52.5.2
52.4.1
52.1.0
45.9.0
45.8.0
45.7.0
45.6.0
45.5.1
45.5.0
45.4.0
45.3.0
45.2.0
45.1.1
45.1.0
45.0.2
45.0.1
45.0
38.8.0
38.7.1
38.7.0
38.6.1
38.6.0
38.5.2
38.5.1
38.5.0
38.4.0
38.3.0
38.2.1
38.2.0
38.1.1
38.1.0
38.0.1
38.0
31.8.0
31.7.0
31.6.0
31.5.3
31.5.2
31.5.1
31.5.0
31.4.0
31.3.0
31.2.0
31.1.1
31.1.0
31.0
24.8.1
24.8.0
24.7.0
24.6.0
24.5.0
24.4.0
24.3.0
24.2.0
24.1.1
24.1.0
24.0
17.0.11
17.0.10
17.0.9
17.0.8
17.0.7
17.0.6
17.0.5
17.0.4
17.0.3
17.0.2
17.0.1
17.0
10.0.12
10.0.11
10.0.10
10.0.9
10.0.8
10.0.7
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
10.0
60.5.1
60.5.0
60.4.0
60.2.2
60.2.1
60.2.0
60.1.0
60.0
52.8
52.7
52.5.0
52.4.0
52.3.0
52.2.1
52.2.0
52.1.2
52.1.1
52.1
52.0.2
52.0.1
52.0
45.9
45.8
45.7
45.6
45.5
45.4
45.3
45.2
45.1
45
Vulnerabilities (281)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131840 - Improper Privilege Management CVE-2026-8955 |
CWE-269 | High | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052102 and 35 more |
||
| #VU131843 - Improper Access Control CVE-2026-8958 |
CWE-284 | High | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052102 and 35 more |
||
| #VU131844 - Out-of-bounds read CVE-2026-8959 |
CWE-125 | Low | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052150 and 20 more |
||
| #VU131845 - Improper input validation CVE-2026-8961 |
CWE-20 | Medium | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052102 and 35 more |
||
| #VU131846 - Protection Mechanism Failure CVE-2026-8962 |
CWE-693 | Medium | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052102 and 35 more |
||
| #VU131847 - NULL Pointer Dereference CVE-2026-8968 |
CWE-476 | Medium | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052102 and 35 more |
||
| #VU131837 - Integer overflow CVE-2026-8949 |
CWE-190 | Low | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052150 and 9 more |
||
| #VU131838 - Improper Access Control CVE-2026-8950 |
CWE-284 | High | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052102 and 35 more |
||
| #VU131839 - Integer overflow CVE-2026-8954 |
CWE-190 | Medium | 140.11.0 | 19.05.2026 |
SB2026051930 SB2026051935 SB2026052102 and 35 more |
||
| #VU131833 - Out-of-bounds read CVE-2026-8946 |
CWE-125 | High | 115.36.0, 140.11.0 | 19.05.2026 |
SB2026051929 SB2026051930 SB2026051935 and 36 more |
||
| #VU131834 - Use After Free CVE-2026-8947 |
CWE-416 | High | 115.36.0, 140.11.0 | 19.05.2026 |
SB2026051929 SB2026051930 SB2026051935 and 36 more |
||
| #VU131835 - Use After Free CVE-2026-8953 |
CWE-416 | Medium | 115.36.0, 140.11.0 | 19.05.2026 |
SB2026051929 SB2026051930 SB2026051935 and 35 more |
||
| #VU131836 - Memory corruption CVE-2026-8975 |
CWE-119 | High | 115.36.0, 140.11.0 | 19.05.2026 |
SB2026051929 SB2026051930 SB2026051935 and 36 more |
||
| #VU131768 - Protection Mechanism Failure CVE-2026-8401 |
CWE-693 | High | 115.36.0, 140.11.0 | 18.05.2026 |
SB2026051267 SB2026051929 SB2026051930 and 34 more |
||
| #VU131171 - Improper input validation CVE-2026-8391 |
CWE-20 | High | 115.36.0, 140.11.0 | 12.05.2026 |
SB2026051267 SB2026051929 SB2026051930 and 35 more |
||
| #VU131168 - Improper input validation CVE-2026-8388 |
CWE-20 | High | 115.36.0, 140.11.0 | 12.05.2026 |
SB2026051267 SB2026051929 SB2026051930 and 35 more |
||
| #VU130581 - Use After Free CVE-2026-8090 |
CWE-416 | High | 115.35.2, 140.10.2 | 07.05.2026 |
SB20260507196 SB2026051199 SB20260511100 and 20 more |
||
| #VU130582 - Improper input validation CVE-2026-8091 |
CWE-20 | High | 115.35.2, 140.10.2 | 07.05.2026 |
SB20260507196 SB20260509128 SB20260509129 and 5 more |
||
| #VU130583 - Memory corruption CVE-2026-8092 |
CWE-119 | High | 115.35.2, 140.10.2 | 07.05.2026 |
SB20260507196 SB2026051199 SB20260511100 and 20 more |
||
| #VU128408 - Memory corruption CVE-2026-7322 |
CWE-119 | High | 115.35.1, 140.10.1 | 28.04.2026 |
SB20260428226 SB2026043088 SB2026050342 and 26 more |
Showing elements 61 - 80 out of 281