CVE-2025-0237

CVE-2025-0237 concerns the WebChannel API: the sending principal was accepted without validation, enabling potential privilege escalation. Affected products include Firefox (all releases before 134; including ESR

KLA78810 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. Use after free vulnerability can be...

Mozilla Firefox ESR < 128.6

The version of Firefox ESR installed on the remote Windows host is prior to 128.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-02 advisory. - Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird...

PT-2025-3807

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 134 Firefox ESR versions prior to 128.6 Thunderbird versions prior to 134 Thunderbird versions prior to 128.6 Description The issue arises when segmenting specially crafted text, leading to memory corruption and a...

Security Vulnerabilities fixed in Firefox ESR 115.19 — Mozilla

Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these...

PT-2025-3808

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 134 Firefox ESR versions prior to 128.6 Thunderbird versions prior to 134 Thunderbird ESR versions prior to 128.6 Description The issue is related to memory safety bugs that have been identified in Firefox and...

Mozilla Firefox ESR < 115.19

The version of Firefox ESR installed on the remote Windows host is prior to 115.19. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-03 advisory. - Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird...

Mozilla Firefox ESR < 115.19

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.19. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-03 advisory. - Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5,...

OPENSUSE-SU-2025:14619-1 firefox-esr-128.6.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Firefox ESR Security Update (MFSA2024-41) - Mac OS X

Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

PT-2025-49850

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 146 Firefox ESR versions prior to 115.31 Firefox ESR versions prior to 140.6 Description A privilege escalation issue exists in the DOM Notifications component. This allows for potential unauthorized access or control...

PT-2025-49849

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 146 Firefox ESR versions prior to 140.6 Description A use-after-free issue exists in the WebRTC: Signaling component of the software. This condition may lead to unexpected behavior or potentially allow for arbitrary...

PT-2025-37937

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 143 Firefox ESR versions prior to 140.3 Thunderbird versions prior to 143 Thunderbird versions prior to 140.3 Description The software contains a flaw. Recommendations Update Firefox to version 143 or later. Update...

PT-2025-37930

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 143 Firefox ESR versions prior to 140.3 Thunderbird versions prior to 143 Thunderbird versions prior to 140.3 Description The software contains a flaw. Recommendations Update Firefox to version 143 or later. Update...

PT-2025-49855

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 146 Firefox ESR versions prior to 140.6 Description A privilege escalation issue exists in the Netmonitor component. This allows for potential unauthorized access or control within the system. Recommendations Update...

[SECURITY] Fedora 41 Update: icecat-115.18.0-2.rh2.fc41

GNU IceCat is the GNU version of the Firefox ESR browser. Extensions included to this version of IceCat: LibreJS GNU LibreJS aims to address the JavaScript problem described in the article "The JavaScript Trap" of Richard Stallman. JShelter: Mitigates potential threats from JavaScript, including...

[SECURITY] Fedora 40 Update: icecat-115.18.0-2.rh2.fc40

GNU IceCat is the GNU version of the Firefox ESR browser. Extensions included to this version of IceCat: LibreJS GNU LibreJS aims to address the JavaScript problem described in the article "The JavaScript Trap" of Richard Stallman. JShelter: Mitigates potential threats from JavaScript, including...

firefox-esr-128.5.1-1.1 on GA media (moderate)

firefox-esr-128.5.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14572-1 Rating: moderate Cross-References: CVE-2006-6077 CVE-2007-0008 CVE-2007-0009 CVE-2007-0078 CVE-2007-0079 CVE-2007-0775 CVE-2007-0776 CVE-2007-0777 CVE-2007-0780 CVE-2007-0800 CVE-2007-0981 CVE-2007-0995 CVE-2007-0996...

OPENSUSE-SU-2024:14572-1 firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.5.1 ESR: - Fixed: Fixed an issue that prevented some websites from loading when using SSL Inspection. bmo1933747 Patch Instructions: To install this SUSE update use the SUSE recommended...