Known vulnerabilities in Firefox ESR 128.2.0 - page 7

Vendor: Mozilla
Software: Firefox ESR
Version: 128.2.0
Software CPE: cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Total vulnerabilities: 281
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Firefox ESR version 128.2.0 Firefox ESR 128.2.0 is affected by 281 vulnerabilities: 1 critical, 160 high, 83 medium, 37 low Critical High Medium Low

Vulnerabilities (281)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124306 - Out-of-bounds write
CVE-2026-4721
CWE-787 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124292 - Out-of-bounds read
CVE-2026-4686
CWE-125 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124290 - Use After Free
CVE-2026-4684
CWE-416 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 35 more
#VU124291 - Out-of-bounds read
CVE-2026-4685
CWE-125 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU123194 - Use After Free
CVE-2026-2789
CWE-416 Low
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123193 - Memory corruption
CVE-2026-2788
CWE-119 Low
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123192 - Use After Free
CVE-2026-2787
CWE-416 Low
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123191 - Memory corruption
CVE-2026-2778
CWE-119 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123190 - Permissions, Privileges, and Access Controls
CVE-2026-2777
CWE-264 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123189 - Memory corruption
CVE-2026-2776
CWE-119 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 33 more
#VU123188 - Protection Mechanism Failure
CVE-2026-2775
CWE-693 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123187 - Integer overflow
CVE-2026-2774
CWE-190 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123186 - Memory corruption
CVE-2026-2773
CWE-119 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 35 more
#VU123185 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-2771
CWE-74 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123184 - Use After Free
CVE-2026-2772
CWE-416 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123183 - Use After Free
CVE-2026-2770
CWE-416 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123182 - Use After Free
CVE-2026-2769
CWE-416 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123181 - Use After Free
CVE-2026-2764
CWE-416 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123180 - Use After Free
CVE-2026-2763
CWE-416 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 35 more
#VU123175 - Memory corruption
CVE-2026-2757
CWE-119 High
No
No
115.33.0, 140.8.0 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more


Showing elements 121 - 140 out of 281