Known vulnerabilities in Firefox ESR - page 2

Vendor: Mozilla
Software: Firefox ESR
Software CPE: cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Total vulnerabilities: 998
Public exploits: 30
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Firefox ESR Firefox ESR is affected by 998 known vulnerabilities: 11 critical, 508 high, 266 medium, 213 low Critical High Medium Low

Vulnerabilities (998)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138984 - Protection Mechanism Failure
CVE-2026-16377
CWE-693 Medium
No
No
140.13.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 12 more
#VU138985 - Improper Privilege Management
CVE-2026-16379
CWE-269 High
No
No
140.13.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 12 more
#VU138986 - Improper Access Control
CVE-2026-16381
CWE-284 High
No
No
140.13.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 12 more
#VU138987 - Protection Mechanism Failure
CVE-2026-16383
CWE-693 Medium
No
No
140.13.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 12 more
#VU138988 - Protection Mechanism Failure
CVE-2026-16387
CWE-693 High
No
No
140.13.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 12 more
#VU138989 - Protection Mechanism Failure
CVE-2026-16390
CWE-693 Medium
No
No
140.13.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 12 more
#VU138990 - Exposure of sensitive information to an unauthorized actor
CVE-2026-16391
CWE-200 Medium
No
No
140.13.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 12 more
#VU138991 - Improper Privilege Management
CVE-2026-16396
CWE-269 Medium
No
No
140.13.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 12 more
#VU138992 - Exposure of sensitive information to an unauthorized actor
CVE-2026-16405
CWE-200 Low
No
No
140.13.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 12 more
#VU138993 - Memory corruption
CVE-2026-16412
CWE-119 High
No
No
140.13.0 21.07.2026 SB2026072201
SB2026072301
SB2026072302
and 12 more
#VU137818 - Improper Access Control
CVE-2026-15719
CWE-284 High
No
No
115.38.0, 140.13.0 16.07.2026 SB2026071604
SB2026072301
SB2026072442
and 11 more
#VU137817 - Access of Uninitialized Pointer
CVE-2026-15718
CWE-824 High
No
No
115.38.0, 140.13.0 16.07.2026 SB2026071604
SB2026072301
SB2026072442
and 11 more
#VU134616 - Out-of-bounds write
CVE-2026-12292
CWE-787 High
No
No
140.12.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU134617 - Memory corruption
CVE-2026-12298
CWE-119 High
No
No
140.12.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU134618 - Improper Access Control
CVE-2026-12296
CWE-284 High
No
No
140.12.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU134619 - Memory corruption
CVE-2026-12329
CWE-119 High
No
No
140.12.0 16.06.2026 SB2026061653
SB2026061756
SB2026061801
and 27 more
#VU134620 - Improper Access Control
CVE-2026-12304
CWE-284 Medium
No
No
140.12.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU134621 - Memory corruption
CVE-2026-12305
CWE-119 Medium
No
No
140.12.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU134622 - Memory corruption
CVE-2026-12306
CWE-119 Medium
No
No
140.12.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 28 more
#VU134613 - Improper input validation
CVE-2026-12325
CWE-20 Medium
No
No
115.37.0, 140.12.0 16.06.2026 SB2026061653
SB2026061756
SB2026061757
and 29 more


Showing elements 21 - 40 out of 998