Known vulnerabilities in Firefox ESR - page 7

Vendor: Mozilla
Software: Firefox ESR
Software CPE: cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Total vulnerabilities: 998
Public exploits: 30
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Firefox ESR Firefox ESR is affected by 998 known vulnerabilities: 11 critical, 508 high, 266 medium, 213 low Critical High Medium Low

Vulnerabilities (998)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124324 - Type conversion
CVE-2026-4718
CWE-704 Medium
No
No
140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124325 - Out-of-bounds read
CVE-2026-4719
CWE-125 High
No
No
140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124326 - Out-of-bounds write
CVE-2026-4720
CWE-787 High
No
No
140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 35 more
#VU124318 - Exposure of sensitive information to an unauthorized actor
CVE-2026-4712
CWE-200 Low
No
No
140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 33 more
#VU124307 - Use After Free
CVE-2026-4688
CWE-416 High
No
No
140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124308 - Out-of-bounds read
CVE-2026-4695
CWE-125 High
No
No
140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124306 - Out-of-bounds write
CVE-2026-4721
CWE-787 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124301 - Heap-based Buffer Overflow
CVE-2026-4698
CWE-122 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124302 - Out-of-bounds read
CVE-2026-4699
CWE-125 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124303 - Out-of-bounds read
CVE-2026-4706
CWE-125 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 35 more
#VU124296 - Use After Free
CVE-2026-4691
CWE-416 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124297 - Improper Access Control
CVE-2026-4692
CWE-284 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124299 - Integer overflow
CVE-2026-4694
CWE-190 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124300 - Use After Free
CVE-2026-4696
CWE-416 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124292 - Out-of-bounds read
CVE-2026-4686
CWE-125 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124293 - Out-of-bounds write
CVE-2026-4687
CWE-787 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124294 - Integer overflow
CVE-2026-4689
CWE-190 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124295 - Integer overflow
CVE-2026-4690
CWE-190 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124290 - Use After Free
CVE-2026-4684
CWE-416 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 35 more
#VU124291 - Out-of-bounds read
CVE-2026-4685
CWE-125 High
No
No
115.34.0, 140.9.0 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more


Showing elements 121 - 140 out of 998