{
  "fix": "Mozilla Firefox ESR (en-US) 78.0esr",
  "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-78.0esr",
  "summary": "Mozilla Firefox ESR (en-US) 78.0esr, released June 25, 2020, fixes 112 CVEs in Mozilla Firefox ESR (en-US). 3 of them are being exploited (CVE-2019-17026); 3 on CISA KEV. Patch Radar priority: Patch now. The latest Mozilla Firefox ESR (en-US) is 153.7.0, which also fixes every one of these CVEs.",
  "platform": "windows-app",
  "type": "app-version",
  "title": "Mozilla Firefox ESR (en-US) 78.0esr",
  "released": "2020-06-25T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2019-17026, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 112,
  "exploitedCveCount": 3,
  "kevCveCount": 3,
  "ransomwareCveCount": 0,
  "maxEpss": 0.46311,
  "maxCvss": 10,
  "appliesTo": [
    {
      "product": "Mozilla Firefox ESR (en-US)",
      "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-firefox-esr-en-us",
      "fixedVersion": "78.0esr",
      "latestVersion": "153.7.0",
      "supported": true
    }
  ],
  "supersededBy": {
    "product": "Mozilla Firefox ESR (en-US)",
    "latestVersion": "153.7.0",
    "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-firefox-esr-en-us"
  },
  "cves": [
    {
      "cveId": "CVE-2019-17026",
      "url": "https://patchblox.com/security/cve/CVE-2019-17026",
      "title": "Mozilla Firefox And Thunderbird Type Confusion Vulnerability",
      "priority": "Patch now",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.46311,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6820",
      "url": "https://patchblox.com/security/cve/CVE-2020-6820",
      "title": "Mozilla Firefox And Thunderbird Use-After-Free Vulnerability",
      "priority": "Patch now",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.07063,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6819",
      "url": "https://patchblox.com/security/cve/CVE-2020-6819",
      "title": "Mozilla Firefox And Thunderbird Use-After-Free Vulnerability",
      "priority": "Patch now",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.03039,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6831",
      "url": "https://patchblox.com/security/cve/CVE-2020-6831",
      "title": "Firefox ESR: A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC.",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.05803,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12388",
      "url": "https://patchblox.com/security/cve/CVE-2020-12388",
      "title": "Firefox ESR: The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox\u2026",
      "priority": "Urgent",
      "cvss": 10,
      "epss": 0.03524,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12395",
      "url": "https://patchblox.com/security/cve/CVE-2020-12395",
      "title": "Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.02597,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17017",
      "url": "https://patchblox.com/security/cve/CVE-2019-17017",
      "title": "Firefox ESR: Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.02489,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17024",
      "url": "https://patchblox.com/security/cve/CVE-2019-17024",
      "title": "Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3.",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.02455,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11752",
      "url": "https://patchblox.com/security/cve/CVE-2019-11752",
      "title": "Firefox ESR: It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion.",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.02178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17016",
      "url": "https://patchblox.com/security/cve/CVE-2019-17016",
      "title": "Firefox ESR: When pasting a \u0026lt;style\u0026gt; tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.1,
      "epss": 0.01988,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17022",
      "url": "https://patchblox.com/security/cve/CVE-2019-17022",
      "title": "Firefox ESR: When pasting a \u0026lt;style\u0026gt; tag from the clipboard into a rich text editor, the CSS sanitizer does not\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.1,
      "epss": 0.01988,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17012",
      "url": "https://patchblox.com/security/cve/CVE-2019-17012",
      "title": "Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2.",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.01967,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17005",
      "url": "https://patchblox.com/security/cve/CVE-2019-17005",
      "title": "Firefox ESR: The plain text serializer used a fixed-size array for the number of \u003Col\u003E elements it could process; however\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.01907,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17008",
      "url": "https://patchblox.com/security/cve/CVE-2019-17008",
      "title": "Firefox ESR: When using nested workers, a use-after-free could occur during worker destruction.",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.01877,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11743",
      "url": "https://patchblox.com/security/cve/CVE-2019-11743",
      "title": "Firefox ESR: Navigation events were not fully adhering to the W3C\u0027s \u0022Navigation-Timing Level 2\u0022 draft specification\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 3.7,
      "epss": 0.01798,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12389",
      "url": "https://patchblox.com/security/cve/CVE-2020-12389",
      "title": "Firefox ESR: The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox\u2026",
      "priority": "Urgent",
      "cvss": 10,
      "epss": 0.01723,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11746",
      "url": "https://patchblox.com/security/cve/CVE-2019-11746",
      "title": "Firefox ESR: A use-after-free vulnerability can occur while manipulating video elements if the body is freed while\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.01713,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11742",
      "url": "https://patchblox.com/security/cve/CVE-2019-11742",
      "title": "Firefox ESR: A same-origin policy violation occurs allowing the theft of cross-origin images through a combination\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.5,
      "epss": 0.01692,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11759",
      "url": "https://patchblox.com/security/cve/CVE-2019-11759",
      "title": "Firefox ESR: An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.01646,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11740",
      "url": "https://patchblox.com/security/cve/CVE-2019-11740",
      "title": "Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01643,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17010",
      "url": "https://patchblox.com/security/cve/CVE-2019-17010",
      "title": "Firefox ESR: Under certain conditions, when checking the Resist Fingerprinting preference during device orientation\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 7.5,
      "epss": 0.01524,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17011",
      "url": "https://patchblox.com/security/cve/CVE-2019-17011",
      "title": "Firefox ESR: Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 7.5,
      "epss": 0.01524,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-9812",
      "url": "https://patchblox.com/security/cve/CVE-2019-9812",
      "title": "Firefox ESR: Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.3,
      "epss": 0.0151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11764",
      "url": "https://patchblox.com/security/cve/CVE-2019-11764",
      "title": "Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.01472,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11744",
      "url": "https://patchblox.com/security/cve/CVE-2019-11744",
      "title": "Firefox ESR: Some HTML elements, such as \u0026lt;title\u0026gt; and \u0026lt;textarea\u0026gt;, can contain literal angle brackets without\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.1,
      "epss": 0.0145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11738",
      "url": "https://patchblox.com/security/cve/CVE-2019-11738",
      "title": "Firefox ESR: If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.3,
      "epss": 0.01447,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12387",
      "url": "https://patchblox.com/security/cve/CVE-2020-12387",
      "title": "Firefox ESR: A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability.",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.01438,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11760",
      "url": "https://patchblox.com/security/cve/CVE-2019-11760",
      "title": "Firefox ESR: A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling.",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.01365,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11757",
      "url": "https://patchblox.com/security/cve/CVE-2019-11757",
      "title": "Firefox ESR: When following the value\u0027s prototype chain, it was possible to retain a reference to a locale, delete\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.0133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11758",
      "url": "https://patchblox.com/security/cve/CVE-2019-11758",
      "title": "Firefox ESR: Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.01326,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11750",
      "url": "https://patchblox.com/security/cve/CVE-2019-11750",
      "title": "Firefox ESR: A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash.",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.5,
      "epss": 0.01256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11747",
      "url": "https://patchblox.com/security/cve/CVE-2019-11747",
      "title": "Firefox ESR: The \u0022Forget about this site\u0022 feature in the History pane is intended to remove all saved user data that\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.5,
      "epss": 0.01189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11735",
      "url": "https://patchblox.com/security/cve/CVE-2019-11735",
      "title": "Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11763",
      "url": "https://patchblox.com/security/cve/CVE-2019-11763",
      "title": "Firefox ESR: Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.1,
      "epss": 0.01148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11748",
      "url": "https://patchblox.com/security/cve/CVE-2019-11748",
      "title": "Firefox ESR: WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.5,
      "epss": 0.01031,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11749",
      "url": "https://patchblox.com/security/cve/CVE-2019-11749",
      "title": "Firefox ESR: A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 4.3,
      "epss": 0.00896,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11761",
      "url": "https://patchblox.com/security/cve/CVE-2019-11761",
      "title": "Firefox ESR: By using a form with a data URI it was possible to gain access to the privileged JSONView object that\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 5.4,
      "epss": 0.00787,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-25136",
      "url": "https://patchblox.com/security/cve/CVE-2019-25136",
      "title": "Firefox ESR: A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in\u2026",
      "priority": "Urgent",
      "cvss": 10,
      "epss": 0.00664,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11762",
      "url": "https://patchblox.com/security/cve/CVE-2019-11762",
      "title": "Firefox ESR: If two same-origin documents set document.domain differently to become cross-origin, it was possible\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.1,
      "epss": 0.00609,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12392",
      "url": "https://patchblox.com/security/cve/CVE-2020-12392",
      "title": "Firefox ESR: The \u0027Copy as cURL\u0027 feature of Devtools\u0027 network tab did not properly escape the HTTP POST data of a request,\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.1,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6811",
      "url": "https://patchblox.com/security/cve/CVE-2020-6811",
      "title": "Firefox ESR: The \u0027Copy as cURL\u0027 feature of Devtools\u0027 network tab did not properly escape the HTTP method of a request,\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.03271,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12417",
      "url": "https://patchblox.com/security/cve/CVE-2020-12417",
      "title": "Firefox ESR: Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.02676,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6806",
      "url": "https://patchblox.com/security/cve/CVE-2020-6806",
      "title": "Firefox ESR: By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.02607,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12419",
      "url": "https://patchblox.com/security/cve/CVE-2020-12419",
      "title": "Firefox ESR: When processing callbacks that occurred during window flushing in the parent process, the associated\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.02322,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6800",
      "url": "https://patchblox.com/security/cve/CVE-2020-6800",
      "title": "Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.02263,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6825",
      "url": "https://patchblox.com/security/cve/CVE-2020-6825",
      "title": "Firefox ESR: Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.02188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12422",
      "url": "https://patchblox.com/security/cve/CVE-2020-12422",
      "title": "Firefox ESR: In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01938,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6814",
      "url": "https://patchblox.com/security/cve/CVE-2020-6814",
      "title": "Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.01869,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12420",
      "url": "https://patchblox.com/security/cve/CVE-2020-12420",
      "title": "Firefox ESR: When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer,\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01859,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17015",
      "url": "https://patchblox.com/security/cve/CVE-2019-17015",
      "title": "Firefox ESR: During the initialization of a new content process, a pointer offset can be manipulated leading to memory\u2026",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.01806,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12410",
      "url": "https://patchblox.com/security/cve/CVE-2020-12410",
      "title": "Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01729,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12396",
      "url": "https://patchblox.com/security/cve/CVE-2020-12396",
      "title": "Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 75.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.01676,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12390",
      "url": "https://patchblox.com/security/cve/CVE-2020-12390",
      "title": "Firefox ESR: Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.01622,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12426",
      "url": "https://patchblox.com/security/cve/CVE-2020-12426",
      "title": "Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 77.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01609,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6823",
      "url": "https://patchblox.com/security/cve/CVE-2020-6823",
      "title": "Firefox ESR: A malicious extension could have called \u003Ccode\u003Ebrowser.identity.launchWebAuthFlow\u003C/code\u003E, controlling\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.01608,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6799",
      "url": "https://patchblox.com/security/cve/CVE-2020-6799",
      "title": "Firefox ESR: Command line arguments could have been injected during Firefox invocation as a shell handler for certain\u2026",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.01531,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6821",
      "url": "https://patchblox.com/security/cve/CVE-2020-6821",
      "title": "Firefox ESR: When reading from areas partially or fully outside the source resource with WebGL\u0027s \u003Ccode\u003EcopyTexSubImage\u003C/code\u003E\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.01505,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11756",
      "url": "https://patchblox.com/security/cve/CVE-2019-11756",
      "title": "Firefox ESR: Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited\u2026",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 8.8,
      "epss": 0.01494,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6805",
      "url": "https://patchblox.com/security/cve/CVE-2020-6805",
      "title": "Firefox ESR: When removing data about an origin whose tab was recently closed, a use-after-free could occur in the\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01486,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6809",
      "url": "https://patchblox.com/security/cve/CVE-2020-6809",
      "title": "Firefox ESR: When a Web Extension had the all-urls permission and made a fetch request with a mode set to \u0027same-origin\u0027,\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.01484,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6807",
      "url": "https://patchblox.com/security/cve/CVE-2020-6807",
      "title": "Firefox ESR: When a device was changed while a stream was about to be destroyed, the \u003Ccode\u003Estream-reinit\u003C/code\u003E task\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01474,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12391",
      "url": "https://patchblox.com/security/cve/CVE-2020-12391",
      "title": "Firefox ESR: Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.01462,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6826",
      "url": "https://patchblox.com/security/cve/CVE-2020-6826",
      "title": "Firefox ESR: Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.01427,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6796",
      "url": "https://patchblox.com/security/cve/CVE-2020-6796",
      "title": "Firefox ESR: A content process could have modified shared memory relating to crash reporting information, crash itself,\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01371,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6815",
      "url": "https://patchblox.com/security/cve/CVE-2020-6815",
      "title": "Firefox ESR: Mozilla developers reported memory safety and script safety bugs present in Firefox 73.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.01361,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12416",
      "url": "https://patchblox.com/security/cve/CVE-2020-12416",
      "title": "Firefox ESR: A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink,\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.0135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6822",
      "url": "https://patchblox.com/security/cve/CVE-2020-6822",
      "title": "Firefox ESR: On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01325,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11734",
      "url": "https://patchblox.com/security/cve/CVE-2019-11734",
      "title": "Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 68.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.01295,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17025",
      "url": "https://patchblox.com/security/cve/CVE-2019-17025",
      "title": "Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 71.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17014",
      "url": "https://patchblox.com/security/cve/CVE-2019-17014",
      "title": "Firefox ESR: If an image had not loaded correctly (such as when it is not actually an image), it could be dragged\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.4,
      "epss": 0.0125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6801",
      "url": "https://patchblox.com/security/cve/CVE-2020-6801",
      "title": "Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 72.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12409",
      "url": "https://patchblox.com/security/cve/CVE-2020-12409",
      "title": "Firefox ESR: When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an\u2026",
      "priority": "High",
      "severity": "Low",
      "cvss": 8.8,
      "epss": 0.01178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12411",
      "url": "https://patchblox.com/security/cve/CVE-2020-12411",
      "title": "Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 76.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11751",
      "url": "https://patchblox.com/security/cve/CVE-2019-11751",
      "title": "Firefox ESR: Logging-related command line parameters are not properly sanitized when Firefox is launched by another\u2026",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.01062,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17019",
      "url": "https://patchblox.com/security/cve/CVE-2019-17019",
      "title": "Firefox ESR: When Python was installed on Windows, a python file being served with the MIME type of text/plain could\u2026",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.01046,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17013",
      "url": "https://patchblox.com/security/cve/CVE-2019-17013",
      "title": "Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 70.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01026,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12406",
      "url": "https://patchblox.com/security/cve/CVE-2020-12406",
      "title": "Firefox ESR: Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12393",
      "url": "https://patchblox.com/security/cve/CVE-2020-12393",
      "title": "Firefox ESR: The \u0027Copy as cURL\u0027 feature of Devtools\u0027 network tab did not properly escape the HTTP method of a request,\u2026",
      "priority": "High",
      "cvss": 7.8,
      "epss": 0.01011,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12423",
      "url": "https://patchblox.com/security/cve/CVE-2020-12423",
      "title": "Firefox ESR: When the Windows DLL \u0022webauthn.dll\u0022 was missing from the Operating System, and a malicious one was placed\u2026",
      "priority": "High",
      "cvss": 7.8,
      "epss": 0.00414,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17009",
      "url": "https://patchblox.com/security/cve/CVE-2019-17009",
      "title": "Firefox ESR: When running, the updater service wrote status and log files to an unrestricted location; potentially\u2026",
      "priority": "High",
      "cvss": 7.8,
      "epss": 0.00333,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11753",
      "url": "https://patchblox.com/security/cve/CVE-2019-11753",
      "title": "Firefox ESR: The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected\u2026",
      "priority": "High",
      "cvss": 7.8,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11736",
      "url": "https://patchblox.com/security/cve/CVE-2019-11736",
      "title": "Firefox ESR: The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the\u2026",
      "priority": "High",
      "cvss": 7,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12418",
      "url": "https://patchblox.com/security/cve/CVE-2020-12418",
      "title": "Firefox ESR: Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.03034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6798",
      "url": "https://patchblox.com/security/cve/CVE-2020-6798",
      "title": "Firefox ESR: If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.02046,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17021",
      "url": "https://patchblox.com/security/cve/CVE-2019-17021",
      "title": "Firefox ESR: During the initialization of a new content process, a race condition occurs that can allow a content\u2026",
      "priority": "Routine",
      "cvss": 5.3,
      "epss": 0.01867,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12421",
      "url": "https://patchblox.com/security/cve/CVE-2020-12421",
      "title": "Firefox ESR: When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01843,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12424",
      "url": "https://patchblox.com/security/cve/CVE-2020-12424",
      "title": "Firefox ESR: When constructing a permission prompt for WebRTC, a URI was supplied from the content process.",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01607,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6812",
      "url": "https://patchblox.com/security/cve/CVE-2020-6812",
      "title": "Firefox ESR: The first time AirPods are connected to an iPhone, they become named after the user\u0027s name by default\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.01601,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12425",
      "url": "https://patchblox.com/security/cve/CVE-2020-12425",
      "title": "Firefox ESR: Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01573,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12405",
      "url": "https://patchblox.com/security/cve/CVE-2020-12405",
      "title": "Firefox ESR: When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.3,
      "epss": 0.01352,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17023",
      "url": "https://patchblox.com/security/cve/CVE-2019-17023",
      "title": "Firefox ESR: After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting\u2026",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 6.5,
      "epss": 0.0134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12415",
      "url": "https://patchblox.com/security/cve/CVE-2020-12415",
      "title": "Firefox ESR: When \u0022%2F\u0022 was present in a manifest URL, Firefox\u0027s AppCache behavior may have become confused and allowed\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.01265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6813",
      "url": "https://patchblox.com/security/cve/CVE-2020-6813",
      "title": "Firefox ESR: When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.3,
      "epss": 0.01219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15648",
      "url": "https://patchblox.com/security/cve/CVE-2020-15648",
      "title": "Firefox ESR: Using object or embed tags, it was possible to frame other websites, even if they disallowed framing\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17020",
      "url": "https://patchblox.com/security/cve/CVE-2019-17020",
      "title": "Firefox ESR: If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet,\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.0114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6808",
      "url": "https://patchblox.com/security/cve/CVE-2020-6808",
      "title": "Firefox ESR: When a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.01103,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6810",
      "url": "https://patchblox.com/security/cve/CVE-2020-6810",
      "title": "Firefox ESR: After a website had entered fullscreen mode, it could have used a previously opened popup to obscure\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.01033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12407",
      "url": "https://patchblox.com/security/cve/CVE-2020-12407",
      "title": "Firefox ESR: Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00974,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12408",
      "url": "https://patchblox.com/security/cve/CVE-2020-12408",
      "title": "Firefox ESR: When browsing a document hosted on an IP address, an attacker could insert certain characters to flip\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 6.5,
      "epss": 0.00958,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17018",
      "url": "https://patchblox.com/security/cve/CVE-2019-17018",
      "title": "Firefox ESR: When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve\u2026",
      "priority": "Routine",
      "cvss": 5.3,
      "epss": 0.0088,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11765",
      "url": "https://patchblox.com/security/cve/CVE-2019-11765",
      "title": "Firefox ESR: A compromised content process could send a message to the parent process that would cause the \u0027Click\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00844,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17000",
      "url": "https://patchblox.com/security/cve/CVE-2019-17000",
      "title": "Firefox ESR: An object tag with a data URI did not correctly inherit the document\u0027s Content Security Policy.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.1,
      "epss": 0.00805,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12412",
      "url": "https://patchblox.com/security/cve/CVE-2020-12412",
      "title": "Firefox ESR: By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00778,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-17002",
      "url": "https://patchblox.com/security/cve/CVE-2019-17002",
      "title": "Firefox ESR: If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.3,
      "epss": 0.00731,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12399",
      "url": "https://patchblox.com/security/cve/CVE-2020-12399",
      "title": "Firefox ESR: NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.4,
      "epss": 0.00651,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11754",
      "url": "https://patchblox.com/security/cve/CVE-2019-11754",
      "title": "Firefox ESR: When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00624,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12413",
      "url": "https://patchblox.com/security/cve/CVE-2020-12413",
      "title": "Firefox ESR: Observable Discrepancy",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.9,
      "epss": 0.00594,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11741",
      "url": "https://patchblox.com/security/cve/CVE-2019-11741",
      "title": "Firefox ESR: A compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS) attack on\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.1,
      "epss": 0.00587,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-11737",
      "url": "https://patchblox.com/security/cve/CVE-2019-11737",
      "title": "Firefox ESR: If a wildcard (\u0027*\u0027) is specified for the host in Content Security Policy (CSP) directives, any port or\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.3,
      "epss": 0.00546,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12402",
      "url": "https://patchblox.com/security/cve/CVE-2020-12402",
      "title": "Firefox ESR: During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm\u2026",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 4.4,
      "epss": 0.00337,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12394",
      "url": "https://patchblox.com/security/cve/CVE-2020-12394",
      "title": "Firefox ESR: A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 3.3,
      "epss": 0.00285,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6824",
      "url": "https://patchblox.com/security/cve/CVE-2020-6824",
      "title": "Firefox ESR: Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 2.8,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}