Known vulnerabilities in Firefox ESR 60.0.2 - page 6

Vendor: Mozilla
Software: Firefox ESR
Version: 60.0.2
Software CPE: cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Total vulnerabilities: 203
Public exploits: 14
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Firefox ESR version 60.0.2 Firefox ESR 60.0.2 is affected by 203 vulnerabilities: 5 critical, 109 high, 48 medium, 41 low Critical High Medium Low

Vulnerabilities (203)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25859 - Memory corruption
CVE-2020-6814
CWE-119 High
No
No
68.6.0 10.03.2020 SB2020031006
SB2020031019
SB2020031130
and 30 more
#VU25124 - Memory corruption
CVE-2020-6800
CWE-119 High
No
No
68.5.0 11.02.2020 SB2020021108
SB2020021109
SB2020021110
and 26 more
#VU25123 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-6799
CWE-78 Medium
No
No
68.5.0 11.02.2020 SB2020021108
SB2020021205
SB2020021811
and 2 more
#VU25122 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-6798
CWE-94 Medium
No
No
68.5.0 11.02.2020 SB2020021108
SB2020021109
SB2020021110
and 26 more
#VU25121 - Improper Access Control
CVE-2020-6797
CWE-284 Medium
No
No
68.5.0 11.02.2020 SB2020021108
SB2020021109
SB2020021204
and 6 more
#VU25120 - Out-of-bounds write
CVE-2020-6796
CWE-787 High
No
No
68.5.0 11.02.2020 SB2020021108
SB2020021110
SB2020021205
and 12 more
#VU24147 - Type confusion
CVE-2019-17026
CWE-843 Critical
Public exploit available
Exploited
68.4.1 08.01.2020 SB2020010819
SB2020010919
SB2020010922
and 21 more
#VU24062 - Memory corruption
CVE-2019-17024
CWE-119 High
No
No
68.4.0 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU24060 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17022
CWE-79 Medium
No
No
68.4.0 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU24059 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2019-17021
CWE-362 Low
No
No
68.4.0 07.01.2020 SB2020010708
SB2020010712
SB2020011101
and 3 more
#VU24055 - Type confusion
CVE-2019-17017
CWE-843 Medium
No
No
68.4.0 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 20 more
#VU24054 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-17016
CWE-94 Medium
No
No
68.4.0 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU24053 - Memory corruption
CVE-2019-17015
CWE-119 High
No
No
68.4.0 07.01.2020 SB2020010708
SB2020010712
SB2020011101
and 3 more
#VU23377 - Memory corruption
CVE-2019-17012
CWE-119 High
No
No
68.3.0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23376 - Use After Free
CVE-2019-17011
CWE-416 High
No
No
68.3.0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23375 - Memory corruption
CVE-2019-17005
CWE-119 High
No
No
68.3.0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23374 - Use After Free
CVE-2019-17010
CWE-416 High
No
No
68.3.0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23373 - Incorrect Default Permissions
CVE-2019-17009
CWE-276 Low
No
No
68.3.0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 4 more
#VU23371 - Stack-based buffer overflow
CVE-2019-13722
CWE-121 High
No
No
68.3.0 03.12.2019 SB2019120313
SB2019120314
SB2019120424
and 2 more
#VU23370 - Use After Free
CVE-2019-17008
CWE-416 High
No
No
68.3.0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more


Showing elements 101 - 120 out of 203