Firefox ESR

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-23	CVE-2024-0750	A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. network low complexity mozilla debian	8.8
2024-01-23	CVE-2024-0751	Improper Privilege Management vulnerability in multiple products A malicious devtools extension could have been used to escalate privileges. network low complexity mozilla debian CWE-269	8.8
2024-01-23	CVE-2024-0753	In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. network low complexity mozilla debian	6.5
2024-01-23	CVE-2024-0755	Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. network low complexity mozilla debian	8.8
2023-12-19	CVE-2023-6856	Out-of-bounds Write vulnerability in multiple products The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. network low complexity mozilla debian CWE-787	8.8
2023-12-19	CVE-2023-6857	Race Condition vulnerability in multiple products When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. network high complexity mozilla debian CWE-362	5.3
2023-12-19	CVE-2023-6858	Out-of-bounds Write vulnerability in multiple products Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. network low complexity mozilla debian CWE-787	8.8
2023-12-19	CVE-2023-6859	Use After Free vulnerability in multiple products A use-after-free condition affected TLS socket creation when under memory pressure. network low complexity mozilla debian CWE-416	8.8
2023-12-19	CVE-2023-6860	The `VideoBridge` allowed any content process to use textures produced by remote decoders. network low complexity mozilla debian	6.5
2023-12-19	CVE-2023-6861	Out-of-bounds Write vulnerability in multiple products The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. network low complexity mozilla debian CWE-787	8.8