apk package

chainguard/firefox-esr

pkg:apk/chainguard/firefox-esr

Vulnerabilities (711)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2026-12322	Med	5.4	< 0	0	Jun 16, 2026	Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12321	Med	5.4	< 0	0	Jun 16, 2026	JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12320	Med	4.3	< 0	0	Jun 16, 2026	Information disclosure in the Password Manager component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12319	Med	6.5	< 0	0	Jun 16, 2026	Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12318	Hig	7.3	< 0	0	Jun 16, 2026	Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12317	Hig	7.5	< 0	0	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12316	Cri	9.1	< 0	0	Jun 16, 2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12315	Cri	9.1	< 140.12-r0	140.12-r0	Jun 16, 2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12314	Hig	7.5	< 140.12-r0	140.12-r0	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12313	Med	4.7	< 140.12.0-r0	140.12.0-r0	Jun 16, 2026	Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12312	Hig	7.5	< 140.12-r0	140.12-r0	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12311	Med	4.7	< 140.12.0-r0	140.12.0-r0	Jun 16, 2026	Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12310	Hig	7.5	< 140.12-r0	140.12-r0	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12309	Med	6.5	< 140.12-r0	140.12-r0	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12308	Med	5.3	< 140.12-r0	140.12-r0	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12307	Med	5.3	< 140.12-r0	140.12-r0	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12306	Med	5.3	< 140.12-r0	140.12-r0	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12305	Hig	7.5	< 140.12-r0	140.12-r0	Jun 16, 2026	Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12304	Cri	9.1	< 140.12-r0	140.12-r0	Jun 16, 2026	Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12303	Med	4.3	< 0	0	Jun 16, 2026	Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

CVE-2026-12322MedJun 16, 2026
affected < 0fixed 0
Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12321MedJun 16, 2026
affected < 0fixed 0
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12320MedJun 16, 2026
affected < 0fixed 0
Information disclosure in the Password Manager component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12319MedJun 16, 2026
affected < 0fixed 0
Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12318HigJun 16, 2026
affected < 0fixed 0
Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12317HigJun 16, 2026
affected < 0fixed 0
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12316CriJun 16, 2026
affected < 0fixed 0
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-12315CriJun 16, 2026
affected < 140.12-r0fixed 140.12-r0
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12314HigJun 16, 2026
affected < 140.12-r0fixed 140.12-r0
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12313MedJun 16, 2026
affected < 140.12.0-r0fixed 140.12.0-r0
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12312HigJun 16, 2026
affected < 140.12-r0fixed 140.12-r0
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12311MedJun 16, 2026
affected < 140.12.0-r0fixed 140.12.0-r0
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12310HigJun 16, 2026
affected < 140.12-r0fixed 140.12-r0
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12309MedJun 16, 2026
affected < 140.12-r0fixed 140.12-r0
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12308MedJun 16, 2026
affected < 140.12-r0fixed 140.12-r0
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12307MedJun 16, 2026
affected < 140.12-r0fixed 140.12-r0
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12306MedJun 16, 2026
affected < 140.12-r0fixed 140.12-r0
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12305HigJun 16, 2026
affected < 140.12-r0fixed 140.12-r0
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12304CriJun 16, 2026
affected < 140.12-r0fixed 140.12-r0
Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12303MedJun 16, 2026
affected < 0fixed 0
Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Page 3 of 36