FE
Product
Firefox ESR
On CISA KEVExploited in the wildRansomware-linked
506
CVEs
9
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 54High 212Medium 185Low 3
Watch
Add Firefox ESR to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11743 | 3.7 | Sep 27 | Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts access to detailed… Affected: 68.0 before 68.1.0 |
| CVE-2015-4000 | 3.7 | May 21 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… Affected: 31.8 |
| CVE-2023-34414 | 3.1 | Jun 19 | The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks that exploit human… Affected: before 102.12 |
Showing 3
The 500 most important CVEs for this product (exploited first, then by severity)