Known vulnerabilities in Firefox ESR 128.3.1 - page 12

Vendor: Mozilla
Software: Firefox ESR
Version: 128.3.1
Software CPE: cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Total vulnerabilities: 314
Public exploits: 3
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Firefox ESR version 128.3.1 Firefox ESR 128.3.1 is affected by 314 vulnerabilities: 190 high, 90 medium, 34 low Critical High Medium Low

Vulnerabilities (314)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113143 - Exposure of sensitive information to an unauthorized actor
CVE-2025-8031
CWE-200 Low
No
No
128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113142 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8030
CWE-94 Medium
No
No
128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113141 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8029
CWE-94 Medium
No
No
128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113138 - Incorrect Calculation
CVE-2025-8028
CWE-682 High
No
No
115.26.0, 128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 39 more
#VU113137 - Buffer over-read
CVE-2025-8027
CWE-126 High
No
No
115.26.0, 128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU111889 - Protection Mechanism Failure
CVE-2025-6430
CWE-693 Medium
No
No
128.12.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111888 - Improper input validation
CVE-2025-6429
CWE-20 Low
No
No
128.12.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111887 - Insufficient UI Warning of Dangerous Operations
CVE-2025-6426
CWE-357 High
No
No
128.12.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 7 more
#VU111886 - Exposure of sensitive information to an unauthorized actor
CVE-2025-6425
CWE-200 Medium
No
No
115.25.0, 128.12.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111885 - Use After Free
CVE-2025-6424
CWE-416 High
No
No
115.25.0, 128.12.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU109878 - Memory corruption
CVE-2025-5269
CWE-119 High
No
No
128.11.0 27.05.2025 SB2025052751
SB2025052772
SB2025052843
and 22 more
#VU109877 - Memory corruption
CVE-2025-5268
CWE-119 High
No
No
128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109876 - Insufficient UI Warning of Dangerous Operations
CVE-2025-5267
CWE-357 Low
No
No
128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109875 - Exposure of sensitive information to an unauthorized actor
CVE-2025-5266
CWE-200 Medium
No
No
128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109859 - Improper input validation
CVE-2025-5265
CWE-20 Medium
No
No
115.24.0, 128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 5 more
#VU109858 - Improper input validation
CVE-2025-5264
CWE-20 Medium
No
No
115.24.0, 128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109857 - Error Handling
CVE-2025-5263
CWE-388 Medium
No
No
115.24.0, 128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109855 - Double Free
CVE-2025-5262
CWE-415 High
No
No
115.24.0, 128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 4 more
#VU109401 - Out-of-bounds write
CVE-2025-4921
CWE-787 High
No
No
115.23.1, 128.10.1 18.05.2025 SB2025051812
SB2025051813
SB2025051908
and 32 more
#VU109400 - Out-of-bounds write
CVE-2025-4920
CWE-787 High
No
No
115.23.1, 128.10.1 18.05.2025 SB2025051812
SB2025051813
SB2025051908
and 32 more


Showing elements 221 - 240 out of 314