Skip to content

Vulnerabilities of Mozilla Firefox ESR

Is your version affected?

CVE Summary Score Published
CVE-2017-7755 The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer… Not rated Jun 11, 2018
CVE-2017-7803 When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored Not rated Jun 11, 2018
CVE-2017-7793 A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when… Not rated Jun 11, 2018
CVE-2017-7764 Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the… Not rated Jun 11, 2018
CVE-2017-7754 An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations Not rated Jun 11, 2018
CVE-2017-7802 A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element Not rated Jun 11, 2018
CVE-2017-7828 A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been… Not rated Jun 11, 2018
CVE-2017-7792 A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely… Not rated Jun 11, 2018
CVE-2017-7763 Default fonts on OS X display some Tibetan characters as whitespace Not rated Jun 11, 2018
CVE-2017-7753 An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data Not rated Jun 11, 2018
CVE-2017-7782 An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never… Not rated Jun 11, 2018
CVE-2017-7801 A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing… Not rated Jun 11, 2018
CVE-2017-7791 On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over… Not rated Jun 11, 2018
CVE-2017-7819 A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during… Not rated Jun 11, 2018
CVE-2017-7810 Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3 Not rated Jun 11, 2018
CVE-2017-7752 A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages… Not rated Jun 11, 2018
CVE-2017-7761 The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users Not rated Jun 11, 2018
CVE-2017-7800 A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the… Not rated Jun 11, 2018
CVE-2017-7818 A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA)… Not rated Jun 11, 2018
CVE-2017-7751 A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash Not rated Jun 11, 2018
CVE-2017-7760 The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it Not rated Jun 11, 2018
CVE-2017-7779 Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2 Not rated Jun 11, 2018
CVE-2017-7768 The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the… Not rated Jun 11, 2018
CVE-2017-7798 The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page… Not rated Jun 11, 2018
CVE-2017-7750 A use-after-free vulnerability during video control operations when a "" element holds a reference to an older window if… Not rated Jun 11, 2018

Other Mozilla products