Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

mozilla firefox esr vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2

CVE-2014-1547

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbit...
Mozilla FirefoxMozilla Firefox 24.0Mozilla Firefox 24.1.0Mozilla Firefox 24.1.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5Mozilla Firefox Esr 24.6Mozilla Thunderbird
9.3
CVSSv2

CVE-2014-1555

Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 allows remote malicious users to execute arbitrary code via vectors that trigger a FireOnStateChange event.
Mozilla FirefoxMozilla Firefox 24.0Mozilla Firefox 24.1.0Mozilla Firefox 24.1.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5Mozilla Firefox Esr 24.6Mozilla Thunderbird
9.3
CVSSv2

CVE-2014-1556

Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 allow remote malicious users to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library.
Mozilla FirefoxMozilla Firefox 24.0Mozilla Firefox 24.1.0Mozilla Firefox 24.1.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5Mozilla Firefox Esr 24.6Mozilla Thunderbird
10
CVSSv2

CVE-2014-1551

Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 on Windows allows remote malicious users to execute arbitrary code via crafted use of fonts in MathML content, leading to im...
Mozilla FirefoxMozilla Firefox 24.0Mozilla Firefox 24.1.0Mozilla Firefox 24.1.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5Mozilla Firefox Esr 24.6Mozilla Thunderbird
9.3
CVSSv2

CVE-2012-1939

jsinfer.cpp in Mozilla Firefox ESR 10.x prior to 10.0.5 and Thunderbird ESR 10.x prior to 10.0.5 does not properly determine data types, which allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code v...
Mozilla Firefox 10.0Mozilla Firefox 10.0.1Mozilla Firefox 10.0.2Mozilla Firefox 10.0.3Mozilla Firefox 10.0.4Mozilla Thunderbird Esr 10.0Mozilla Thunderbird Esr 10.0.1Mozilla Thunderbird Esr 10.0.2Mozilla Thunderbird Esr 10.0.3Mozilla Thunderbird Esr 10.0.4
6.5
CVSSv3

CVE-2024-7531

Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header protection feature when the connection is using the ChaCha20-Poly1305 cipher suite....
Mozilla FirefoxMozilla Firefox EsrMozilla Firefox Esr 128.0
7.2
CVSSv2

CVE-2013-1706

Stack-based buffer overflow in maintenanceservice.exe in the Mozilla Maintenance Service in Mozilla Firefox prior to 23.0, Firefox ESR 17.x prior to 17.0.8, Thunderbird prior to 17.0.8, and Thunderbird ESR 17.x prior to 17.0.8 allows local users to gain privileges via a long path...
Mozilla Firefox 17.0Mozilla Firefox 17.0.1Mozilla Firefox 17.0.2Mozilla Firefox 17.0.3Mozilla Firefox 17.0.4Mozilla Firefox 17.0.5Mozilla Firefox 17.0.6Mozilla Firefox 17.0.7Mozilla ThunderbirdMozilla Thunderbird 17.0Mozilla Thunderbird 17.0.1Mozilla Thunderbird 17.0.2
7.2
CVSSv2

CVE-2013-1707

Stack-based buffer overflow in Mozilla Updater in Mozilla Firefox prior to 23.0, Firefox ESR 17.x prior to 17.0.8, Thunderbird prior to 17.0.8, and Thunderbird ESR 17.x prior to 17.0.8 allows local users to gain privileges via a long pathname on the command line to the Mozilla Ma...
Mozilla ThunderbirdMozilla Thunderbird 17.0Mozilla Thunderbird 17.0.1Mozilla Thunderbird 17.0.2Mozilla Thunderbird 17.0.3Mozilla Thunderbird 17.0.4Mozilla Thunderbird 17.0.5Mozilla Thunderbird 17.0.6Mozilla Thunderbird Esr 17.0Mozilla Thunderbird Esr 17.0.1Mozilla Thunderbird Esr 17.0.2Mozilla Thunderbird Esr 17.0.3
6.9
CVSSv2

CVE-2013-1712

Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox prior to 23.0, Firefox ESR 17.x prior to 17.0.8, Thunderbird prior to 17.0.8, and Thunderbird ESR 17.x prior to 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows ...
Mozilla FirefoxMozilla Firefox 17.0Mozilla Firefox 17.0.1Mozilla Firefox 17.0.2Mozilla Firefox 17.0.3Mozilla Firefox 17.0.4Mozilla Firefox 17.0.5Mozilla Firefox 17.0.6Mozilla Firefox 17.0.7Mozilla Firefox 19.0Mozilla Firefox 19.0.1Mozilla Firefox 19.0.2
9.3
CVSSv2

CVE-2013-1685

Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox prior to 22.0, Firefox ESR 17.x prior to 17.0.7, Thunderbird prior to 17.0.7, and Thunderbird ESR 17.x prior to 17.0.7 allows remote malicious users to execute arbitrary code or cause a de...
Mozilla FirefoxMozilla Firefox 19.0Mozilla Firefox 19.0.1Mozilla Firefox 19.0.2Mozilla Firefox 20.0Mozilla Firefox 20.0.1Mozilla Firefox 17.0Mozilla Firefox 17.0.1Mozilla Firefox 17.0.2Mozilla Firefox 17.0.3Mozilla Firefox 17.0.4Mozilla Firefox 17.0.5
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2024-55591CVE-2025-21333CVE-2025-0446CVE-2024-11870memory leaklocalunprivilegedCVE-2024-4227CVE-2024-57479
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook