Firefox Esr (Mozilla) - vulnerabilities (CVEs)

712 CVEs, 0 in the last 30 days, 213 known versions, newest CVE from 2024-11-26. Vendor: Mozilla.

CVEs of Firefox Esr

CVE-2024-11697 - CVSS 8.8 (high), 2024-11-26: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have…
CVE-2024-11704 - CVSS 9.8 (critical), 2024-11-26: A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the same symmetric key…
CVE-2024-11696 - CVSS 5.4 (medium), 2024-11-26: The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an…
CVE-2024-11699 - CVSS 8.8 (high), 2024-11-26: Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2024-11695 - CVSS 5.4 (medium), 2024-11-26: A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This…
CVE-2024-11698 - CVSS 9.8 (critical), 2024-11-26: A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened…
CVE-2024-11691 - CVSS 8.8 (high), 2024-11-26: Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU…
CVE-2024-11694 - CVSS 6.1 (medium), 2024-11-26: Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the…
CVE-2024-11693 - CVSS 9.8 (critical), 2024-11-26: The executable file warning was not presented when downloading .library-ms files. *Note: This issue only affected Windows operating systems. Other operating…
CVE-2024-11692 - CVSS 4.3 (medium), 2024-11-26: An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks. This…
CVE-2024-10464 - CVSS 7.5 (high), 2024-10-29: Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. This was addressed by introducing…
CVE-2024-10467 - CVSS 9.8 (critical), 2024-10-29: Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2024-10463 - CVSS 7.5 (high), 2024-10-29: Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17,…
CVE-2024-10466 - CVSS 7.5 (high), 2024-10-29: By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive. This…
CVE-2024-10465 - CVSS 7.5 (high), 2024-10-29: A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox < 132, Firefox ESR < 128.4,…
CVE-2024-10458 - CVSS 7.5 (high), 2024-10-29: A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox < 132,…
CVE-2024-10461 - CVSS 6.1 (medium), 2024-10-29: In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could…
CVE-2024-10460 - CVSS 5.4 (medium), 2024-10-29: The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox < 132,…
CVE-2024-10459 - CVSS 7.5 (high), 2024-10-29: An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox…
CVE-2024-10462 - CVSS 7.5 (high), 2024-10-29: Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird…
CVE-2024-9680 - CVSS 9.8 (critical), 2024-10-09: An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this…
CVE-2024-9401 - CVSS 9.8 (critical), 2024-10-01: Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory…
CVE-2024-9400 - CVSS 8.8 (high), 2024-10-01: A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation.…
CVE-2024-9402 - CVSS 9.8 (critical), 2024-10-01: Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2024-9398 - CVSS 5.3 (medium), 2024-10-01: By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that…
CVE-2024-9393 - CVSS 7.5 (high), 2024-10-01: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin. This could allow them to…
CVE-2024-9397 - CVSS 6.1 (medium), 2024-10-01: A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This…
CVE-2024-9392 - CVSS 9.8 (critical), 2024-10-01: A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR <…
CVE-2024-9396 - CVSS 8.8 (high), 2024-10-01: It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption.…
CVE-2024-9399 - CVSS 7.5 (high), 2024-10-01: A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This…
CVE-2024-9394 - CVSS 7.5 (high), 2024-10-01: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin. This could allow them to…
CVE-2024-8900 - CVSS 7.5 (high), 2024-09-17: An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability affects…
CVE-2024-7652 - CVSS 7.5 (high), 2024-09-06: An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an…
CVE-2024-8382 - CVSS 8.8 (high), 2024-09-03: Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to…
CVE-2024-8385 - CVSS 9.8 (critical), 2024-09-03: A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability…
CVE-2024-8381 - CVSS 9.8 (critical), 2024-09-03: A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This…
CVE-2024-8384 - CVSS 9.8 (critical), 2024-09-03: The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could…
CVE-2024-8387 - CVSS 9.8 (critical), 2024-09-03: Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2024-8383 - CVSS 7.5 (high), 2024-09-03: Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that the browser does not support. It did…
CVE-2024-8386 - CVSS 6.1 (medium), 2024-09-03: If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack.…
CVE-2024-7529 - CVSS 8.1 (high), 2024-08-06: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability…
CVE-2024-7521 - CVSS 9.8 (critical), 2024-08-06: Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR <…
CVE-2024-7525 - CVSS 9.1 (critical), 2024-08-06: It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests…
CVE-2024-7528 - CVSS 9.8 (critical), 2024-08-06: Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and…
CVE-2024-7520 - CVSS 8.8 (high), 2024-08-06: A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox < 129, Firefox…
CVE-2024-7524 - CVSS 6.1 (medium), 2024-08-06: Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection. On a site protected by Content Security Policy…
CVE-2024-7527 - CVSS 8.8 (high), 2024-08-06: Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox…
CVE-2024-7531 - CVSS 6.5 (medium), 2024-08-06: Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In…
CVE-2024-7519 - CVSS 9.6 (critical), 2024-08-06: Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox…
CVE-2024-7522 - CVSS 9.1 (critical), 2024-08-06: Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14,…
CVE-2024-7526 - CVSS 7.5 (high), 2024-08-06: ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This…
CVE-2024-7518 - CVSS 6.5 (medium), 2024-08-06: Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability…
CVE-2024-6602 - CVSS 9.8 (critical), 2024-07-09: A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird…
CVE-2024-6601 - CVSS 4.7 (medium), 2024-07-09: A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < 128, Firefox ESR <…
CVE-2024-6604 - CVSS 7.5 (high), 2024-07-09: Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2024-6600 - CVSS 6.3 (medium), 2024-07-09: Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private…
CVE-2024-6603 - CVSS 7.4 (high), 2024-07-09: In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This…
CVE-2024-5702 - CVSS 7.5 (high), 2024-06-11: Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12,…
CVE-2024-5700 - CVSS 7 (high), 2024-06-11: Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2024-5696 - CVSS 8.6 (high), 2024-06-11: By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This…
CVE-2024-5688 - CVSS 8.1 (high), 2024-06-11: If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox <…
CVE-2024-5692 - CVSS 6.5 (medium), 2024-06-11: On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as…
CVE-2024-5691 - CVSS 4.7 (medium), 2024-06-11: By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass…
CVE-2024-5690 - CVSS 4.3 (medium), 2024-06-11: By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This…
CVE-2024-5693 - CVSS 6.1 (medium), 2024-06-11: Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy.…
CVE-2024-4777 - CVSS 8.8 (high), 2024-05-14: Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2024-4769 - CVSS 5.9 (medium), 2024-05-14: When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script…
CVE-2024-4768 - CVSS 6.1 (medium), 2024-05-14: A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects…
CVE-2024-4770 - CVSS 8.8 (high), 2024-05-14: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR <…
CVE-2024-4767 - CVSS 4.3 (medium), 2024-05-14: If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is…
CVE-2024-4367 - CVSS 8.8 (high), 2024-05-14: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects…
CVE-2024-3861 - CVSS 4 (medium), 2024-04-16: If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free. This…
CVE-2024-3852 - CVSS 7.5 (high), 2024-04-16: GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox < 125, Firefox ESR < 115.10,…
CVE-2024-3859 - CVSS 5.9 (medium), 2024-04-16: On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This…
CVE-2024-3864 - CVSS 8.1 (high), 2024-04-16: Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with…
CVE-2024-3302 - CVSS 3.7 (low), 2024-04-16: There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the…
CVE-2024-3857 - CVSS 7.8 (high), 2024-04-16: The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerability…
CVE-2024-3863 - CVSS 9.8 (critical), 2024-04-16: The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating…
CVE-2024-3854 - CVSS 8.8 (high), 2024-04-16: In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox < 125,…
CVE-2024-29944 - CVSS 8.4 (high), 2024-03-22: An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This…
CVE-2024-2611 - CVSS 5.5 (medium), 2024-03-19: A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects…
CVE-2024-2616 - CVSS 2.7 (low), 2024-03-19: To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects…
CVE-2024-2614 - CVSS 8.8 (high), 2024-03-19: Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2024-2612 - CVSS 8.1 (high), 2024-03-19: If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code…
CVE-2024-2608 - CVSS 8.4 (high), 2024-03-19: `AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows, causing…
CVE-2024-2607 - CVSS 8.1 (high), 2024-03-19: Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other…
CVE-2024-2610 - CVSS 6.1 (medium), 2024-03-19: Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. This vulnerability…
CVE-2024-2605 - CVSS 5.9 (medium), 2024-03-19: An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. *Note:* This issue only affected Windows…
CVE-2024-2609 - CVSS 6.1 (medium), 2024-03-19: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This…
CVE-2023-5388 - CVSS 6.5 (medium), 2024-03-19: NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private…
CVE-2024-1547 - CVSS 6.5 (medium), 2024-02-20: Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website (with the victim website's URL…
CVE-2024-1550 - CVSS 6.1 (medium), 2024-02-20: A malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user's mouse to be re-positioned…
CVE-2024-1553 - CVSS 8.1 (high), 2024-02-20: Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume…
CVE-2024-1546 - CVSS 7.5 (high), 2024-02-20: When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. This…
CVE-2024-1549 - CVSS 6.1 (medium), 2024-02-20: If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in user confusion and…
CVE-2024-1552 - CVSS 7.5 (high), 2024-02-20: Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM…
CVE-2024-1548 - CVSS 4.3 (medium), 2024-02-20: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible…
CVE-2024-1551 - CVSS 6.1 (medium), 2024-02-20: Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well…
CVE-2024-0742 - CVSS 4.3 (medium), 2024-01-23: It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent…
CVE-2024-0747 - CVSS 6.5 (medium), 2024-01-23: When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security…