Mozilla

Firefox ESR

984 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-5702

  • EPSS 0.86%
  • Veröffentlicht 11.06.2024 13:15:51
  • Zuletzt bearbeitet 04.04.2025 14:41:47

Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12.

8.1

CVE-2024-5688

Exploit
  • EPSS 1.07%
  • Veröffentlicht 11.06.2024 13:15:50
  • Zuletzt bearbeitet 04.04.2025 23:46:14

If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

4.3

CVE-2024-5690

  • EPSS 0.74%
  • Veröffentlicht 11.06.2024 13:15:50
  • Zuletzt bearbeitet 26.03.2025 14:15:31

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

4.7

CVE-2024-5691

  • EPSS 0.65%
  • Veröffentlicht 11.06.2024 13:15:50
  • Zuletzt bearbeitet 19.03.2025 21:15:37

By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and ...

6.5

CVE-2024-5692

Exploit
  • EPSS 0.62%
  • Veröffentlicht 11.06.2024 13:15:50
  • Zuletzt bearbeitet 27.03.2025 20:07:17

On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.url` by including an invalid character in the extension. *Note:* This issue only affected Win...

6.1

CVE-2024-5693

  • EPSS 0.57%
  • Veröffentlicht 11.06.2024 13:15:50
  • Zuletzt bearbeitet 27.03.2025 20:02:24

Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

6.1

CVE-2024-4768

Exploit
  • EPSS 0.54%
  • Veröffentlicht 14.05.2024 18:15:14
  • Zuletzt bearbeitet 01.04.2025 18:00:09

A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

5.9

CVE-2024-4769

  • EPSS 0.37%
  • Veröffentlicht 14.05.2024 18:15:14
  • Zuletzt bearbeitet 01.04.2025 17:46:33

When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses. This could have been abused to learn information cross-origin. This vulnerability affect...

8.8

CVE-2024-4770

Exploit
  • EPSS 0.59%
  • Veröffentlicht 14.05.2024 18:15:14
  • Zuletzt bearbeitet 01.04.2025 17:46:09

When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

4.3

CVE-2024-4767

Exploit
  • EPSS 0.49%
  • Veröffentlicht 14.05.2024 18:15:13
  • Zuletzt bearbeitet 01.04.2025 17:47:50

If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox < 126, Firefox ESR < 115.11,...