Skip to content

Known vulnerabilities in Mozilla Firefox ESR

Is your version affected?

CVE Summary Score Published
CVE-2023-32212 An attacker could have positioned a `datalist` element to obscure the address bar Not rated Jun 2, 2023
CVE-2023-32205 In multiple cases browser prompts could have been obscured by popups controlled by content Not rated Jun 2, 2023
CVE-2023-32211 A type checking bug would have led to invalid code being compiled Not rated Jun 2, 2023
CVE-2023-32207 A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting… 8.8 High Jun 2, 2023
CVE-2023-29536 An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory,… Not rated Jun 2, 2023
CVE-2023-29535 Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced Not rated Jun 2, 2023
CVE-2023-29541 Firefox did not properly handle downloads of files ending in .desktop, which can be interpreted to run… 8.8 High Jun 2, 2023
CVE-2023-29550 Memory safety bugs present in Firefox 111 and Firefox ESR 102.9 8.8 High Jun 2, 2023
CVE-2023-29533 A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests,… Not rated Jun 2, 2023
CVE-2023-29539 When handling the filename directive in the Content-Disposition header, the filename would be truncated if the… Not rated Jun 2, 2023
CVE-2023-29548 A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result 6.5 Medium Jun 2, 2023
CVE-2023-28176 Memory safety bugs present in Firefox 110 and Firefox ESR 102.8 8.8 High Jun 2, 2023
CVE-2023-28164 Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and… 6.5 Medium Jun 2, 2023
CVE-2023-28163 When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable… 6.5 Medium Jun 2, 2023
CVE-2023-28162 While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type 8.8 High Jun 2, 2023
CVE-2023-25744 Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7 Not rated Jun 2, 2023
CVE-2023-25743 A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser… Not rated Jun 2, 2023
CVE-2023-25734 After downloading a Windows .url shortcut from the local filesystem, an attacker could supply a remote path that would… 8.1 High Jun 2, 2023
CVE-2023-25742 When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash Not rated Jun 2, 2023
CVE-2023-25752 When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within… Not rated Jun 2, 2023
CVE-2023-25732 When encoding data from an inputStream in xpcom the size of the input being encoded was not correctly calculated… 8.8 High Jun 2, 2023
CVE-2023-25739 Module load requests that failed were not being checked as to whether or not they were cancelled causing a… 8.8 High Jun 2, 2023
CVE-2023-25751 Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten… Not rated Jun 2, 2023
CVE-2023-25730 A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen… 5.4 Medium Jun 2, 2023
CVE-2023-25738 Members of the DEVMODEW struct set by the printer device driver weren't being validated and could have resulted in… 6.5 Medium Jun 2, 2023

Other Mozilla products