Firefox Esr

CVEs (299)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-5436	Mozilla Corporation Firefox	Hig	0.57	8.8	0.02	Jun 11, 2018	An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird < 52.1,…
CVE-2026-8958	Mozilla Corporation Firefox	Hig	0.56	8.6	0.00	May 19, 2026	Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-109783	Mozilla Corporation Thunderbird	Hig	0.54	8.3	0.00	Oct 13, 2026	Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.
CVE-2026-109782	Mozilla Corporation Thunderbird	Hig	0.54	8.3	0.00	Oct 13, 2026	Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.
CVE-2026-109766	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 13, 2026	Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109760	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 13, 2026	Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109759	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 13, 2026	Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109754	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 13, 2026	Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109753	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 13, 2026	Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109737	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 13, 2026	Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109733	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 13, 2026	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109722	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 13, 2026	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109716	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 13, 2026	Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109715	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 13, 2026	Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-100830	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Sep 29, 2026	Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100816	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Sep 29, 2026	Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100809	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Sep 29, 2026	Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100803	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Sep 29, 2026	Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100798	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Sep 29, 2026	Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100771	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Sep 29, 2026	Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVE-2017-5436HigJun 11, 2018
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.02
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird < 52.1,…
CVE-2026-8958HigMay 19, 2026
Mozilla Corporation
Firefox
risk 0.56cvss 8.6epss 0.00
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-109783HigOct 13, 2026
Mozilla Corporation
Thunderbird
risk 0.54cvss 8.3epss 0.00
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.
CVE-2026-109782HigOct 13, 2026
Mozilla Corporation
Thunderbird
risk 0.54cvss 8.3epss 0.00
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.
CVE-2026-109766HigOct 13, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109760HigOct 13, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109759HigOct 13, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109754HigOct 13, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109753HigOct 13, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109737HigOct 13, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109733HigOct 13, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109722HigOct 13, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109716HigOct 13, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109715HigOct 13, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-100830HigSep 29, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100816HigSep 29, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100809HigSep 29, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100803HigSep 29, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
CVE-2026-100798HigSep 29, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-100771HigSep 29, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

Page 7 of 15