Skip to content

Vulnerabilities of Mozilla firefox_esr

Is your version affected?

CVE Summary Score Published
CVE-2024-3852 GetBoundName could return the wrong version of an object when JIT optimizations were applied 7.5 High Apr 16, 2024
CVE-2024-29944 An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution… 8.4 High Mar 22, 2024
CVE-2024-2614 Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 8.8 High Mar 19, 2024
CVE-2024-2612 If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or… 8.1 High Mar 19, 2024
CVE-2024-2609 The permission prompt input delay could expire while the window is not in focus 6.1 Medium Mar 19, 2024
CVE-2024-2608 `AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have… 8.4 High Mar 19, 2024
CVE-2024-2607 Return registers were overwritten which could have allowed an attacker to execute arbitrary code 8.1 High Mar 19, 2024
CVE-2024-2605 An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox 5.9 Medium Mar 19, 2024
CVE-2024-1553 Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 8.1 High Feb 20, 2024
CVE-2024-1546 When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in… 7.5 High Feb 20, 2024
CVE-2023-4582 Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when… 8.8 High Sep 11, 2023
CVE-2023-4576 On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer… Not rated Sep 11, 2023
CVE-2023-4573 When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a… Not rated Sep 11, 2023
CVE-2023-4057 Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0 Not rated Aug 1, 2023
CVE-2023-4056 Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird… Not rated Aug 1, 2023
CVE-2023-4055 When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no… Not rated Aug 1, 2023
CVE-2023-4051 A website could have obscured the full screen notification by using the file open dialog Not rated Aug 1, 2023
CVE-2023-4050 In some cases, an untrusted input stream was copied to a stack buffer without checking its size Not rated Aug 1, 2023
CVE-2023-4048 An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations Not rated Aug 1, 2023

Other Mozilla products