Known vulnerabilities in Firefox ESR - page 13

Vendor: Mozilla
Software: Firefox ESR
Software CPE: cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Total vulnerabilities: 998
Public exploits: 30
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Firefox ESR Firefox ESR is affected by 998 known vulnerabilities: 11 critical, 508 high, 266 medium, 213 low Critical High Medium Low

Vulnerabilities (998)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114393 - Memory corruption
CVE-2025-9184
CWE-119 High
No
No
140.2.0 22.08.2025 SB2025081946
SB2025082301
SB2025082303
and 4 more
#VU114390 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-9183
CWE-451 Medium
No
No
140.2.0 22.08.2025 SB2025081946
SB2025082839
SB2025082840
and 5 more
#VU114389 - Resource exhaustion
CVE-2025-9182
CWE-400 Low
No
No
140.2.0 22.08.2025 SB2025081946
SB2025082301
SB2025082303
and 28 more
#VU114387 - Use of Uninitialized Variable
CVE-2025-9181
CWE-457 High
No
No
128.14.0, 140.2.0 22.08.2025 SB2025081946
SB2025082223
SB2025082301
and 33 more
#VU114227 - Memory corruption
CVE-2025-9180
CWE-119 High
No
No
115.27.0, 128.14.0, 140.2.0 19.08.2025 SB2025081946
SB2025082223
SB2025082301
and 33 more
#VU114226 - Security Features
CVE-2025-9185
CWE-254 Medium
No
No
115.27.0, 128.14.0, 140.2.0 19.08.2025 SB2025081946
SB2025082223
SB2025082301
and 37 more
#VU113150 - Memory corruption
CVE-2025-8040
CWE-119 High
No
No
140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072323
and 9 more
#VU113149 - Multiple Interpretations of UI Input
CVE-2025-8039
CWE-450 Low
No
No
140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072323
and 9 more
#VU113148 - Protection Mechanism Failure
CVE-2025-8038
CWE-693 Low
No
No
140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072323
and 9 more
#VU113147 - Protection Mechanism Failure
CVE-2025-8037
CWE-693 Medium
No
No
140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072323
and 9 more
#VU113146 - Protection Mechanism Failure
CVE-2025-8036
CWE-693 Medium
No
No
140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072323
and 9 more
#VU113145 - Memory corruption
CVE-2025-8035
CWE-119 High
No
No
128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113144 - Protection Mechanism Failure
CVE-2025-8032
CWE-693 Medium
No
No
128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113143 - Exposure of sensitive information to an unauthorized actor
CVE-2025-8031
CWE-200 Low
No
No
128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113142 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8030
CWE-94 Medium
No
No
128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113141 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8029
CWE-94 Medium
No
No
128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113140 - Memory corruption
CVE-2025-8034
CWE-119 High
No
No
115.26.0, 128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 39 more
#VU113139 - NULL Pointer Dereference
CVE-2025-8033
CWE-476 Low
No
No
115.26.0, 128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU113138 - Incorrect Calculation
CVE-2025-8028
CWE-682 High
No
No
115.26.0, 128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 39 more
#VU113137 - Buffer over-read
CVE-2025-8027
CWE-126 High
No
No
115.26.0, 128.13.0, 140.1.0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more


Showing elements 241 - 260 out of 998