firefox-esr

Direct Vulnerabilities

Known vulnerabilities in the firefox-esr package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Use After Free	<78.15.0-r0
H CVE-2021-38500	<78.15.0-r0
M CVE-2021-38492	<78.14.0-r0
H Missing Initialization of Resource	<78.13.0-r0
H Interpretation Conflict	<78.13.0-r0
H Race Condition	<78.13.0-r0
H Use After Free	<78.13.0-r0
H Out-of-bounds Write	<78.14.0-r0
H Out-of-Bounds	<78.13.0-r0
H CVE-2021-29984	<78.13.0-r0
H Use After Free	<78.12.0-r0
H Out-of-bounds Write	<78.12.0-r0
H Out-of-bounds Write	<78.12.0-r0
H Out-of-Bounds	<78.11.0-r0
M Incorrect Calculation	<78.10.0-r0
H Integer Overflow or Wraparound	<78.10.0-r0
H Arbitrary Argument Injection	<78.10.0-r0
H Improper Privilege Management	<78.10.0-r0
M Insufficient Verification of Data Authenticity	<78.10.0-r0
H Operation on a Resource after Expiration or Release	<78.10.0-r0
H Missing Initialization of Resource	<78.10.0-r0
H Out-of-Bounds	<78.9.0-r0
M Authentication Bypass	<78.9.0-r0
M Inadequate Encryption Strength	<78.9.0-r0
H Out-of-Bounds	<78.9.0-r0
H CVE-2021-23978	<78.8.0-r0
M Information Exposure	<78.8.0-r0
M Information Exposure	<78.8.0-r0
M CVE-2021-23969	<78.8.0-r0
H CVE-2021-23961	<78.10.0-r0
H CVE-2021-23960	<78.7.0-r0
H Out-of-Bounds	<78.7.0-r0
H Access of Resource Using Incompatible Type ('Type Confusion')	<78.7.0-r0
M CVE-2021-23953	<78.7.0-r0
M CVE-2020-26976	<78.7.0-r0
H Use After Free	<78.6.1-r0
H CVE-2020-35112	<78.6.0-r0
H Out-of-bounds Write	<78.6.0-r0
M CVE-2020-26978	<78.6.0-r0
M CVE-2020-35111	<78.6.0-r0
H Out-of-bounds Write	<78.6.0-r0
H Out-of-bounds Write	<78.6.0-r0
M Information Exposure	<78.6.0-r0
H CVE-2020-26973	<78.6.0-r0
H Out-of-bounds Write	<78.5.0-r0
M Improper Cross-boundary Removal of Sensitive Data	<78.5.0-r0
M CVE-2020-26966	<78.5.0-r0
M CVE-2020-26961	<78.5.0-r0
H Use After Free	<78.5.0-r0
H Use After Free	<78.5.0-r0
M Cross-site Scripting (XSS)	<78.5.0-r0
M Cross-site Scripting (XSS)	<78.5.0-r0
M Improper Restriction of Rendered UI Layers or Frames	<78.5.0-r0
M Cross-site Scripting (XSS)	<78.5.0-r0
H Use After Free	<78.5.0-r0
M CVE-2020-16012	<78.5.0-r0
H Use After Free	<78.5.0-r0
C CVE-2020-15683	<78.5.0-r0
C Out-of-bounds Write	<78.5.0-r0
H Use After Free	<78.3.0-r0
M Open Redirect	<78.3.0-r0
M Cross-site Scripting (XSS)	<78.3.0-r0
H Release of Invalid Pointer or Reference	<78.3.0-r0
H Release of Invalid Pointer or Reference	<78.2.0-r0
M Incorrect Authorization	<78.2.0-r0
H Improper Privilege Management	<78.2.0-r0
H Use After Free	<78.1.0-r0
M CVE-2020-6514	<78.1.0-r0
M Origin Validation Error	<78.1.0-r0
M CVE-2020-15653	<78.1.0-r0
M Loop with Unreachable Exit Condition ('Infinite Loop')	<78.1.0-r0
M Information Exposure	<78.1.0-r0
H Access of Resource Using Incompatible Type ('Type Confusion')	<78.1.0-r0
H Uncontrolled Search Path Element	<78.1.0-r0
M Improper Check for Unusual or Exceptional Conditions	<78.1.0-r0
H Out-of-bounds Write	<78.1.0-r0
H Out-of-bounds Write	<68.5.0-r0
M Improper Input Validation	<68.5.0-r0
M Cross-site Scripting (XSS)	<68.5.0-r0
H Improper Input Validation	<68.5.0-r0
H Out-of-Bounds	<68.5.0-r0
M Information Exposure	<68.9.0-r0
M Use After Free	<68.9.0-r0
H Insufficient Verification of Data Authenticity	<68.9.0-r0
H Out-of-Bounds	<68.9.0-r0
M Out-of-bounds Read	<68.6.0-r0
H Use After Free	<68.6.0-r0
H Out-of-bounds Read	<68.6.0-r0
H Use After Free	<68.6.0-r0
H Arbitrary Code Injection	<68.6.0-r0
M Information Exposure	<68.6.0-r0
C Out-of-Bounds	<68.6.0-r0
H Out-of-Bounds	<68.7.0-r0
H Out-of-bounds Write	<68.7.0-r0
C Out-of-Bounds	<68.7.0-r0
H Use After Free	<68.6.1-r0
H Double Free	<68.6.1-r0
H Out-of-Bounds	<68.10.0-r0
M Out-of-bounds Read	<68.10.0-r0
H Use After Free	<68.10.0-r0
H Use After Free	<68.10.0-r0
M Improper Certificate Validation	<68.10.0-r0
H Race Condition	<68.8.0-r0
C Improper Input Validation	<68.8.0-r0
C Improper Input Validation	<68.8.0-r0
M Information Exposure	<68.8.0-r0
H Arbitrary Code Injection	<68.8.0-r0
C Out-of-Bounds	<68.8.0-r0
C Buffer Overflow	<68.8.0-r0
H Out-of-Bounds	<68.2.0-r0
H Access of Resource Using Incompatible Type ('Type Confusion')	<68.4.1-r0
H Buffer Overflow	<68.4.1-r0
M Cross-site Scripting (XSS)	<68.4.1-r0
M Cross-site Scripting (XSS)	<68.4.1-r0
H CVE-2019-17009	<68.3.0-r0
H Use After Free	<68.3.0-r0
H Use After Free	<68.3.0-r0
H Use After Free	<68.3.0-r0
H Buffer Overflow	<68.3.0-r0
H Buffer Overflow	<68.3.0-r0
M Origin Validation Error	<68.2.0-r0
M Race Condition	<68.2.0-r0
M Cross-site Scripting (XSS)	<68.2.0-r0
H Use After Free	<68.2.0-r0
H Out-of-bounds Write	<68.2.0-r0
H Use After Free	<68.2.0-r0
H Buffer Overflow	<68.2.0-r0
H Out-of-bounds Read	<68.2.0-r0
L Information Exposure	<68.1.0-r0
H Out-of-Bounds	<68.1.0-r0
H Use After Free	<68.1.0-r0
H Use After Free	<68.1.0-r0
C Improper Input Validation	<68.1.0-r0
M Inclusion of Functionality from Untrusted Control Sphere	<68.1.0-r0
M Cross-site Scripting (XSS)	<68.1.0-r0
C Improper Authentication	<68.0.2-r0
H Information Exposure	<60.7.0-r0
H Race Condition	<60.7.0-r0
H Improper Handling of Exceptional Conditions	<60.7.0-r0
H Arbitrary Code Injection	<68.0-r0
H Out-of-Bounds	<68.0-r0
C Use After Free	<68.0-r0
H Cross-site Request Forgery (CSRF)	<68.0-r0
M Cross-site Scripting (XSS)	<68.0-r0
M CVE-2019-11730	<68.0-r0
M Improper Encoding or Escaping of Output	<68.0-r0
H Out-of-bounds Read	<68.0-r0
C Out-of-Bounds	<68.0-r0
H CVE-2019-11711	<68.0-r0
C Improper Input Validation	<60.7.2-r0
H Access of Resource Using Incompatible Type ('Type Confusion')	<60.7.1-r0
M Access of Resource Using Incompatible Type ('Type Confusion')	<60.7.0-r0
M Origin Validation Error	<60.7.0-r0
C Out-of-Bounds	<60.7.0-r0
C Use After Free	<60.7.0-r0
C Use After Free	<60.7.0-r0
C Out-of-Bounds	<60.7.0-r0
C Improper Input Validation	<60.7.0-r0
C Use After Free	<60.7.0-r0
M Improper Input Validation	<60.7.0-r0
M Improper Input Validation	<60.6.1-r0
C Improper Input Validation	<60.6.1-r0
H Access of Resource Using Incompatible Type ('Type Confusion')	<60.6.1-r0
H Out-of-Bounds	<60.6.1-r0
C Out-of-Bounds	<60.6.1-r0
C Reachable Assertion	<60.6.1-r0
M Out-of-Bounds	<60.6.1-r0
C Out-of-Bounds	<60.6.1-r0
C Use After Free	<60.6.1-r0
C Use After Free	<60.6.1-r0
C Improper Input Validation	<60.6.1-r0
M Origin Validation Error	<60.7.0-r0
M Out-of-bounds Read	<60.7.0-r0
M Information Exposure	<60.7.0-r0
M Out-of-bounds Write	<60.5.2-r0
M Use After Free	<60.7.0-r0
C Out-of-Bounds	<60.5.0-r0
C Improper Authentication	<60.5.0-r0
C Use After Free	<60.5.0-r0
M CVE-2018-18506	<60.6.1-r0
H Out-of-bounds Write	<60.5.2-r0
H Out-of-bounds Write	<60.5.2-r0
C Use After Free	<52.6.0-r0
C Use After Free	<52.6.0-r0
C Use After Free	<52.6.0-r0
C Use After Free	<52.6.0-r0
M CVE-2018-5117	<52.6.0-r0
C Use After Free	<52.6.0-r0
C Integer Overflow or Wraparound	<52.6.0-r0
C Use After Free	<52.6.0-r0
C Use After Free	<52.6.0-r0
H Information Exposure	<52.5.2-r0
C Out-of-Bounds	<52.6.0-r0
C Use After Free	<52.6.0-r0

Vulnerability

Vulnerable Version

Use After Free

<78.15.0-r0