Known vulnerabilities in Firefox ESR - page 50

Vendor: Mozilla
Software: Firefox ESR
Software CPE: cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Total vulnerabilities: 998
Public exploits: 30
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Firefox ESR Firefox ESR is affected by 998 known vulnerabilities: 11 critical, 508 high, 266 medium, 213 low Critical High Medium Low

Vulnerabilities (998)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU6355 - Use After Free
CVE-2017-5442
CWE-416 High
No
No
- 20.04.2017 SB2017041905
SB2017050201
SB2017050803
and 6 more
#VU6351 - Heap-based Buffer Overflow
CVE-2016-6354
CWE-122 High
No
No
- 19.04.2017 SB2017041905
SB2016071906
SB2017050201
and 13 more
#VU6350 - Out-of-bounds read
CVE-2016-10195
CWE-125 High
No
No
- 19.04.2017 SB2017041905
SB2017020202
SB2017050201
and 6 more
#VU6349 - Stack-based buffer overflow
CVE-2016-10196
CWE-121 High
No
No
- 19.04.2017 SB2017041905
SB2017020202
SB2017050201
and 8 more
#VU6348 - Out-of-bounds read
CVE-2016-10197
CWE-125 High
No
No
- 19.04.2017 SB2017041905
SB2017020202
SB2017050201
and 8 more
#VU6346 - Use After Free
CVE-2017-5430
CWE-416 High
No
No
- 19.04.2017 SB2017041905
SB2017050201
SB2017082306
and 4 more
#VU6339 - Exposure of sensitive information to an unauthorized actor
CVE-2017-5462
CWE-200 Low
No
No
- 19.04.2017 SB2017041905
SB2017050201
SB2017050701
and 7 more
#VU6336 - Exposure of sensitive information to an unauthorized actor
CVE-2017-5445
CWE-200 Medium
No
No
- 19.04.2017 SB2017041905
SB2017050201
SB2017050803
and 6 more
#VU6335 - Privilege / Sandbox Issues
CVE-2017-5456
CWE-265 Medium
No
No
- 19.04.2017 SB2017041905
SB2017082306
SB2017042104
and 3 more
#VU6334 - Privilege / Sandbox Issues
CVE-2017-5455
CWE-265 High
No
No
- 19.04.2017 SB2017041905
SB2017082306
SB2017042104
and 3 more
#VU6333 - Privilege / Sandbox Issues
CVE-2017-5454
CWE-265 Medium
No
No
- 19.04.2017 SB2017041905
SB2017050201
SB2017050803
and 5 more
#VU6325 - Use After Free
CVE-2017-5441
CWE-416 High
No
No
- 19.04.2017 SB2017041905
SB2017050201
SB2017050803
and 7 more
#VU6324 - Use After Free
CVE-2017-5440
CWE-416 High
No
No
- 19.04.2017 SB2017041905
SB2017050201
SB2017050803
and 6 more
#VU6131 - Integer overflow
CVE-2017-5428
CWE-190 High
No
No
- 21.03.2017 SB2017032101
SB2017031801
SB2017032006
and 4 more
#VU1831 - Improper input validation
CVE-2015-4495
CWE-20 Critical
Available
Exploited
- 21.12.2016 SB2016080501
SB2015080701
SB2015080702
and 4 more
#VU1018 - Improper input validation
CVE-2016-1954
CWE-20 Medium
No
No
- 17.10.2016 SB2016031301
#VU43405 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3994
CWE-79 Low
No
No
10.0.8 10.10.2012 SB2012101003
#VU43406 - Use After Free
CVE-2012-4181
CWE-416 High
No
No
10.0.8 10.10.2012 SB2012101003


Showing elements 981 - 1000 out of 998