p PatchFirst

PatchFirst · Latest vulnerabilities

firefox-esr vulnerabilities · Page 8

Vulnerabilities published for firefox-esr in the last 30 days: 124. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 1214

  1. CVE-2026-92013

    High · CVSS 8.8EPSS 0.26%Fix available

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Update to 140.16.0esr-1~deb13u1
    Published Updated
  2. CVE-2026-92012

    High · CVSS 8.8EPSS 0.26%Fix available

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Update to 140.16.0esr-1~deb13u1
    Published Updated
  3. CVE-2026-92011

    High · CVSS 8.8EPSS 0.26%Fix available

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Update to 140.16.0esr-1~deb13u1
    Published Updated
  4. CVE-2026-92010

    High · CVSS 8.8EPSS 0.26%Fix available

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Update to 140.16.0esr-1~deb13u1
    Published Updated
  5. CVE-2026-92009

    High · CVSS 8.8EPSS 0.26%Fix available

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Update to 140.16.0esr-1~deb13u1
    Published Updated
  6. CVE-2026-92008

    High · CVSS 8.8EPSS 0.26%Fix available

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Update to 140.16.0esr-1~deb13u1
    Published Updated
  7. CVE-2026-92007

    High · CVSS 8.8EPSS 0.26%Fix available

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Update to 140.16.0esr-1~deb13u1
    Published Updated
  8. CVE-2026-92006

    High · CVSS 8.8EPSS 0.33%Fix available

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

    Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

    • Update to 140.16.0esr-1~deb13u1
    Published Updated
  9. CVE-2026-84143

    Critical · CVSS 9.8EPSS 0.38%Fix available

    Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15

    Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Update to 140.15.0esr-1~deb13u1
    Published Updated
  10. CVE-2026-84145

    High · CVSS 7.5EPSS 0.37%Fix available

    Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15

    Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Update to 140.15.0esr-1~deb13u1
    Published Updated
  11. CVE-2026-84131

    High · CVSS 8.8EPSS 0.33%Fix available

    Privilege escalation due to invalid pointer in the Graphics component

    Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Update to 140.15.0esr-1~deb13u1
    Published Updated
  12. CVE-2026-84121

    Critical · CVSS 9.6EPSS 0.32%Fix available

    Sandbox escape due to use-after-free in the DOM: Security component

    Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Update to 140.15.0esr-1~deb13u1
    Published Updated
  13. CVE-2026-84119

    Critical · CVSS 9.6EPSS 0.32%Fix available

    Sandbox escape due to use-after-free in the DOM: Navigation component

    Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

    • Update to 140.15.0esr-1~deb13u1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →