Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox_esr:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox Esr (bdc94ed7-a614-58b9-b7d5-0e4682d3ba68)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox-esr purl2cpe 2026-06-01 10:17:53.464199
pkg:github/plasmazilla/firefox-esr purl2cpe 2026-06-01 10:17:53.464200
pkg:npm/firefox-binary purl2cpe 2026-06-01 10:17:53.464201
pkg:rpm/opensuse/firefox-esr purl2cpe 2026-06-01 10:17:53.464203

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7527 vulnerable 2026-06-08 06:58:22.377500 Details available
Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.
Published: 2024-08-06T12:38:14.698Z
Updated: 2025-03-18T19:05:01.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7520 vulnerable 2026-06-08 06:58:22.366117 Details available
A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.
Published: 2024-08-06T12:38:13.117Z
Updated: 2025-03-24T16:39:36.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5700 vulnerable 2026-06-08 06:56:17.079428 Details available
Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
Published: 2024-06-11T12:40:14.287Z
Updated: 2024-08-01T21:18:07.031Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4777 vulnerable 2026-06-08 06:50:18.620251 Details available
Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
Published: 2024-05-14T17:21:24.864Z
Updated: 2025-03-13T16:28:20.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4770 vulnerable 2026-06-08 06:50:18.606790 Details available
When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
Published: 2024-05-14T17:21:24.594Z
Updated: 2025-02-13T17:53:40.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4769 vulnerable 2026-06-08 06:50:18.605593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4367 vulnerable 2026-06-08 06:50:17.593834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3854 vulnerable 2026-06-08 06:43:51.678579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3852 vulnerable 2026-06-08 06:43:51.672197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2608 vulnerable 2026-06-08 06:33:31.638281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1546 vulnerable 2026-06-08 06:27:13.354505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11699 vulnerable 2026-06-08 06:23:50.239787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11698 vulnerable 2026-06-08 06:23:50.238959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11696 vulnerable 2026-06-08 06:23:50.236922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11693 vulnerable 2026-06-08 06:23:50.234494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11692 vulnerable 2026-06-08 06:23:50.233719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11691 vulnerable 2026-06-08 06:23:50.218917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10467 vulnerable 2026-06-08 06:23:46.662654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10466 vulnerable 2026-06-08 06:23:46.661448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10463 vulnerable 2026-06-08 06:23:46.655686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10462 vulnerable 2026-06-08 06:23:46.654656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4576 vulnerable 2026-06-08 06:16:13.486748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4573 vulnerable 2026-06-08 06:16:13.483948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4057 vulnerable 2026-06-08 06:16:11.253705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4056 vulnerable 2026-06-08 06:16:11.252683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4055 vulnerable 2026-06-08 06:16:11.251816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4051 vulnerable 2026-06-08 06:16:11.237850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4050 vulnerable 2026-06-08 06:16:11.236700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4048 vulnerable 2026-06-08 06:16:11.232352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.