FE
Product
Firefox ESR
On CISA KEVExploited in the wildRansomware-linked
506
CVEs
9
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 54High 212Medium 185Low 3
Watch
Add Firefox ESR to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5428 | 9.8 | Jun 11 | An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest Affected: before 52.0.1 |
| CVE-2024-7519 | 9.6 | Aug 6 | Insufficient checks when processing graphics shared memory could have led to memory corruption Affected: before 115.14.0; 128.0 |
| CVE-2022-26384 | 9.6 | Dec 22 | If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scripts</code>, they were able to craft a link that, when… Affected: before 91.7 |
| CVE-2022-22759 | 9.6 | Dec 22 | If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to the iframe's document that e.g Affected: before 91.6 |
The 500 most important CVEs for this product (exploited first, then by severity)