Vulnerabilities > Mozilla > Firefox ESR
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-06-11 | CVE-2017-5460 | Use After Free vulnerability in multiple products A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. | 7.5 |
| 2018-06-11 | CVE-2017-5459 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. | 7.5 |
| 2018-06-11 | CVE-2017-5456 | Incorrect Permission Assignment for Critical Resource vulnerability in multiple products A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. | 7.5 |
| 2018-06-11 | CVE-2017-5455 | Multiple Security vulnerability in Mozilla Firefox The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. | 5.0 |
| 2018-06-11 | CVE-2017-5454 | Information Exposure vulnerability in multiple products A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. | 5.0 |
| 2018-06-11 | CVE-2017-5451 | Improper Input Validation vulnerability in multiple products A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. | 4.3 |
| 2018-06-11 | CVE-2017-5449 | Improper Input Validation vulnerability in multiple products A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. | 5.0 |
| 2018-06-11 | CVE-2017-5448 | Out-of-bounds Write vulnerability in multiple products An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. | 7.5 |
| 2018-06-11 | CVE-2017-5447 | Use After Free vulnerability in multiple products An out-of-bounds read during the processing of glyph widths during text layout. | 6.4 |
| 2018-06-11 | CVE-2017-5446 | Out-of-bounds Read vulnerability in multiple products An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. | 7.5 |