Known vulnerabilities in Firefox ESR - page 14

Vendor: Mozilla
Software: Firefox ESR
Software CPE: cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Total vulnerabilities: 998
Public exploits: 30
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Firefox ESR Firefox ESR is affected by 998 known vulnerabilities: 11 critical, 508 high, 266 medium, 213 low Critical High Medium Low

Vulnerabilities (998)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111889 - Protection Mechanism Failure
CVE-2025-6430
CWE-693 Medium
No
No
128.12.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111888 - Improper input validation
CVE-2025-6429
CWE-20 Low
No
No
128.12.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111887 - Insufficient UI Warning of Dangerous Operations
CVE-2025-6426
CWE-357 High
No
No
128.12.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 7 more
#VU111886 - Exposure of sensitive information to an unauthorized actor
CVE-2025-6425
CWE-200 Medium
No
No
115.25.0, 128.12.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111885 - Use After Free
CVE-2025-6424
CWE-416 High
No
No
115.25.0, 128.12.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU109878 - Memory corruption
CVE-2025-5269
CWE-119 High
No
No
128.11.0 27.05.2025 SB2025052751
SB2025052772
SB2025052843
and 22 more
#VU109877 - Memory corruption
CVE-2025-5268
CWE-119 High
No
No
128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109876 - Insufficient UI Warning of Dangerous Operations
CVE-2025-5267
CWE-357 Low
No
No
128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109875 - Exposure of sensitive information to an unauthorized actor
CVE-2025-5266
CWE-200 Medium
No
No
128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109859 - Improper input validation
CVE-2025-5265
CWE-20 Medium
No
No
115.24.0, 128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 5 more
#VU109858 - Improper input validation
CVE-2025-5264
CWE-20 Medium
No
No
115.24.0, 128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109857 - Error Handling
CVE-2025-5263
CWE-388 Medium
No
No
115.24.0, 128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109855 - Double Free
CVE-2025-5262
CWE-415 High
No
No
115.24.0, 128.11.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 4 more
#VU109401 - Out-of-bounds write
CVE-2025-4921
CWE-787 High
No
No
115.23.1, 128.10.1 18.05.2025 SB2025051812
SB2025051813
SB2025051908
and 32 more
#VU109400 - Out-of-bounds write
CVE-2025-4920
CWE-787 High
No
No
115.23.1, 128.10.1 18.05.2025 SB2025051812
SB2025051813
SB2025051908
and 32 more
#VU108050 - Memory corruption
CVE-2025-4093
CWE-119 High
No
No
128.10.0 29.04.2025 SB2025042927
SB2025042929
SB2025043001
and 26 more
#VU108049 - Memory corruption
CVE-2025-4091
CWE-119 High
No
No
128.10.0 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 27 more
#VU108048 - Out-of-bounds read
CVE-2025-4087
CWE-125 High
No
No
128.10.0 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 27 more
#VU108047 - Improper input validation
CVE-2025-4084
CWE-20 Medium
No
No
115.23.0, 128.10.0 29.04.2025 SB2025042927
SB2025042929
SB2025043001
and 8 more
#VU108046 - Protection Mechanism Failure
CVE-2025-4083
CWE-693 High
No
No
115.23.0, 128.10.0 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 27 more


Showing elements 261 - 280 out of 998