p PatchFirst

PatchFirst · Latest vulnerabilities

firefox-esr vulnerabilities · Page 7

Vulnerabilities published for firefox-esr in the last 30 days: 124. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 1214

  1. CVE-2026-100759

    High · CVSS 8.1EPSS 0.31%Fix available

    Uninitialized memory in the Storage: Quota Manager component

    Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    firefox-esrOperating systems
    • Update to 153.4.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2026-100756

    High · CVSS 8.1EPSS 0.31%Fix available

    Incorrect boundary conditions in the Audio/Video: Playback component

    Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    firefox-esrOperating systems
    • Update to 153.4.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2026-92032

    Critical · CVSS 9.6EPSS 0.32%Fix available

    Sandbox escape due to invalid pointer in the Graphics component

    Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    firefox-esrOperating systems
    • Update to 140.16.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2026-92030

    Medium · CVSS 5.4EPSS 0.22%Fix available

    Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component

    Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    firefox-esrOperating systems
    • Update to 140.16.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. CVE-2026-92020

    High · CVSS 8.8EPSS 0.26%Fix available

    Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

    Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    firefox-esrOperating systems
    • Update to 140.16.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. CVE-2026-92019

    High · CVSS 8.1EPSS 0.31%Fix available

    Mitigation bypass in the Remote Settings Client component

    Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    firefox-esrOperating systems
    • Update to 140.16.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. CVE-2026-92017

    High · CVSS 8.8EPSS 0.24%Fix available

    Privilege escalation in the DOM: Service Workers component

    Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    firefox-esrOperating systems
    • Update to 140.16.0esr-1~deb13u1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →