firefox-esr

Direct Vulnerabilities

Known vulnerabilities in the firefox-esr package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Information Exposure	<69.9.0-r0
H Out-of-Bounds	<69.9.0-r0
H Use After Free	<69.9.0-r0
H Use After Free	<69.9.0-r0
C Improper Input Validation	<69.9.0-r0
M Inclusion of Functionality from Untrusted Control Sphere	<69.9.0-r0
M Cross-site Scripting (XSS)	<69.9.0-r0
H Information Exposure	<60.7.0-r0
H Race Condition	<60.7.0-r0
H Improper Handling of Exceptional Conditions	<60.7.0-r0
H Arbitrary Code Injection	<60.8.0-r0
H Out-of-Bounds	<60.8.0-r0
C Use After Free	<60.8.0-r0
H Cross-site Request Forgery (CSRF)	<60.8.0-r0
M Cross-site Scripting (XSS)	<60.8.0-r0
M CVE-2019-11730	<60.8.0-r0
M Improper Encoding or Escaping of Output	<60.8.0-r0
H Out-of-bounds Read	<60.8.0-r0
C Out-of-Bounds	<60.8.0-r0
H CVE-2019-11711	<60.8.0-r0
C Improper Input Validation	<60.7.2-r0
H Access of Resource Using Incompatible Type ('Type Confusion')	<60.7.1-r0
M Access of Resource Using Incompatible Type ('Type Confusion')	<60.7.0-r0
M Origin Validation Error	<60.7.0-r0
C Out-of-Bounds	<60.7.0-r0
C Use After Free	<60.7.0-r0
C Use After Free	<60.7.0-r0
C Out-of-Bounds	<60.7.0-r0
C Improper Input Validation	<60.7.0-r0
C Use After Free	<60.7.0-r0
M Improper Input Validation	<60.7.0-r0
M Improper Input Validation	<60.6.1-r0
C Improper Input Validation	<60.6.1-r0
H Access of Resource Using Incompatible Type ('Type Confusion')	<60.6.1-r0
H Out-of-Bounds	<60.6.1-r0
C Out-of-Bounds	<60.6.1-r0
C Reachable Assertion	<60.6.1-r0
M Out-of-Bounds	<60.6.1-r0
C Out-of-Bounds	<60.6.1-r0
C Use After Free	<60.6.1-r0
C Use After Free	<60.6.1-r0
C Improper Input Validation	<60.6.1-r0
M Origin Validation Error	<60.7.0-r0
M Out-of-bounds Read	<60.7.0-r0
M Information Exposure	<60.7.0-r0
M Out-of-bounds Write	<60.5.2-r0
M Use After Free	<60.7.0-r0
C Out-of-Bounds	<60.5.0-r0
C Improper Authentication	<60.5.0-r0
C Use After Free	<60.5.0-r0
M CVE-2018-18506	<60.6.1-r0
H Out-of-bounds Write	<60.5.2-r0
H Out-of-bounds Write	<60.5.2-r0
C Integer Overflow or Wraparound	<52.6.0-r0
C Use After Free	<52.6.0-r0
C Use After Free	<52.6.0-r0
C Use After Free	<52.6.0-r0
C Use After Free	<52.6.0-r0
C Out-of-Bounds	<52.6.0-r0
C Use After Free	<52.6.0-r0
C Use After Free	<52.6.0-r0
C Use After Free	<52.6.0-r0
H Information Exposure	<52.5.2-r0
C Use After Free	<52.6.0-r0
M CVE-2018-5117	<52.6.0-r0

Vulnerability

Vulnerable Version

Information Exposure

<69.9.0-r0