# Mozilla Firefox ESR (en-US) 78.0esr Mozilla Firefox ESR (en-US) 78.0esr, released June 25, 2020, fixes 112 CVEs in Mozilla Firefox ESR (en-US). 3 of them are being exploited (CVE-2019-17026); 3 on CISA KEV. Patch Radar priority: Patch now. The latest Mozilla Firefox ESR (en-US) is 153.7.0, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-78.0esr - Platform: Windows apps - Released: Jun 25, 2020 - Priority: Patch now (Closes CVE-2019-17026, exploited (CISA KEV)) - CVEs: 112, exploited: 3, on CISA KEV: 3 - Superseded by: [Mozilla Firefox ESR (en-US) 153.7.0](https://patchblox.com/security/data/product/windows-app/mozilla-firefox-esr-en-us.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Mozilla Firefox ESR (en-US)](https://patchblox.com/security/data/product/windows-app/mozilla-firefox-esr-en-us.md) | | 78.0esr | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2019-17026](https://patchblox.com/security/data/cve/CVE-2019-17026.md) | Patch now | Mozilla Firefox And Thunderbird Type Confusion Vulnerability | 8.8 | 0.4631 | CISA KEV | | [CVE-2020-6820](https://patchblox.com/security/data/cve/CVE-2020-6820.md) | Patch now | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 8.8 | 0.0706 | CISA KEV | | [CVE-2020-6819](https://patchblox.com/security/data/cve/CVE-2020-6819.md) | Patch now | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 8.8 | 0.0304 | CISA KEV | | [CVE-2020-6831](https://patchblox.com/security/data/cve/CVE-2020-6831.md) | Urgent | Firefox ESR: A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. | 9.8 | 0.0580 | | | [CVE-2020-12388](https://patchblox.com/security/data/cve/CVE-2020-12388.md) | Urgent | Firefox ESR: The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox… | 10.0 | 0.0352 | | | [CVE-2020-12395](https://patchblox.com/security/data/cve/CVE-2020-12395.md) | Urgent | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox… | 9.8 | 0.0260 | | | [CVE-2019-17017](https://patchblox.com/security/data/cve/CVE-2019-17017.md) | Urgent | Firefox ESR: Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in… | 8.8 | 0.0249 | | | [CVE-2019-17024](https://patchblox.com/security/data/cve/CVE-2019-17024.md) | Urgent | Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. | 8.8 | 0.0246 | | | [CVE-2019-11752](https://patchblox.com/security/data/cve/CVE-2019-11752.md) | Urgent | Firefox ESR: It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. | 8.8 | 0.0218 | | | [CVE-2019-17016](https://patchblox.com/security/data/cve/CVE-2019-17016.md) | Urgent | Firefox ESR: When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly… | 6.1 | 0.0199 | | | [CVE-2019-17022](https://patchblox.com/security/data/cve/CVE-2019-17022.md) | Urgent | Firefox ESR: When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not… | 6.1 | 0.0199 | | | [CVE-2019-17012](https://patchblox.com/security/data/cve/CVE-2019-17012.md) | Urgent | Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. | 8.8 | 0.0197 | | | [CVE-2019-17005](https://patchblox.com/security/data/cve/CVE-2019-17005.md) | Urgent | Firefox ESR: The plain text serializer used a fixed-size array for the number of
    elements it could process; however… | 8.8 | 0.0191 | | | [CVE-2019-17008](https://patchblox.com/security/data/cve/CVE-2019-17008.md) | Urgent | Firefox ESR: When using nested workers, a use-after-free could occur during worker destruction. | 8.8 | 0.0188 | | | [CVE-2019-11743](https://patchblox.com/security/data/cve/CVE-2019-11743.md) | Urgent | Firefox ESR: Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification… | 3.7 | 0.0180 | | | [CVE-2020-12389](https://patchblox.com/security/data/cve/CVE-2020-12389.md) | Urgent | Firefox ESR: The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox… | 10.0 | 0.0172 | | | [CVE-2019-11746](https://patchblox.com/security/data/cve/CVE-2019-11746.md) | Urgent | Firefox ESR: A use-after-free vulnerability can occur while manipulating video elements if the body is freed while… | 8.8 | 0.0171 | | | [CVE-2019-11742](https://patchblox.com/security/data/cve/CVE-2019-11742.md) | Urgent | Firefox ESR: A same-origin policy violation occurs allowing the theft of cross-origin images through a combination… | 6.5 | 0.0169 | | | [CVE-2019-11759](https://patchblox.com/security/data/cve/CVE-2019-11759.md) | Urgent | Firefox ESR: An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on… | 8.8 | 0.0165 | | | [CVE-2019-11740](https://patchblox.com/security/data/cve/CVE-2019-11740.md) | Urgent | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR… | 9.8 | 0.0164 | | | [CVE-2019-17010](https://patchblox.com/security/data/cve/CVE-2019-17010.md) | Urgent | Firefox ESR: Under certain conditions, when checking the Resist Fingerprinting preference during device orientation… | 7.5 | 0.0152 | | | [CVE-2019-17011](https://patchblox.com/security/data/cve/CVE-2019-17011.md) | Urgent | Firefox ESR: Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race… | 7.5 | 0.0152 | | | [CVE-2019-9812](https://patchblox.com/security/data/cve/CVE-2019-9812.md) | Urgent | Firefox ESR: Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape… | 9.3 | 0.0151 | | | [CVE-2019-11764](https://patchblox.com/security/data/cve/CVE-2019-11764.md) | Urgent | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox… | 8.8 | 0.0147 | | | [CVE-2019-11744](https://patchblox.com/security/data/cve/CVE-2019-11744.md) | Urgent | Firefox ESR: Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without… | 6.1 | 0.0145 | | | [CVE-2019-11738](https://patchblox.com/security/data/cve/CVE-2019-11738.md) | Urgent | Firefox ESR: If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the… | 6.3 | 0.0145 | | | [CVE-2020-12387](https://patchblox.com/security/data/cve/CVE-2020-12387.md) | Urgent | Firefox ESR: A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. | 8.8 | 0.0144 | | | [CVE-2019-11760](https://patchblox.com/security/data/cve/CVE-2019-11760.md) | Urgent | Firefox ESR: A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. | 8.8 | 0.0137 | | | [CVE-2019-11757](https://patchblox.com/security/data/cve/CVE-2019-11757.md) | Urgent | Firefox ESR: When following the value's prototype chain, it was possible to retain a reference to a locale, delete… | 8.8 | 0.0133 | | | [CVE-2019-11758](https://patchblox.com/security/data/cve/CVE-2019-11758.md) | Urgent | Firefox ESR: Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security… | 8.8 | 0.0133 | | | [CVE-2019-11750](https://patchblox.com/security/data/cve/CVE-2019-11750.md) | Urgent | Firefox ESR: A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. | 6.5 | 0.0126 | | | [CVE-2019-11747](https://patchblox.com/security/data/cve/CVE-2019-11747.md) | Urgent | Firefox ESR: The "Forget about this site" feature in the History pane is intended to remove all saved user data that… | 6.5 | 0.0119 | | | [CVE-2019-11735](https://patchblox.com/security/data/cve/CVE-2019-11735.md) | Urgent | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox… | 9.8 | 0.0118 | | | [CVE-2019-11763](https://patchblox.com/security/data/cve/CVE-2019-11763.md) | Urgent | Firefox ESR: Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly… | 6.1 | 0.0115 | | | [CVE-2019-11748](https://patchblox.com/security/data/cve/CVE-2019-11748.md) | Urgent | Firefox ESR: WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera… | 6.5 | 0.0103 | | | [CVE-2019-11749](https://patchblox.com/security/data/cve/CVE-2019-11749.md) | Urgent | Firefox ESR: A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia… | 4.3 | 0.0090 | | | [CVE-2019-11761](https://patchblox.com/security/data/cve/CVE-2019-11761.md) | Urgent | Firefox ESR: By using a form with a data URI it was possible to gain access to the privileged JSONView object that… | 5.4 | 0.0079 | | | [CVE-2019-25136](https://patchblox.com/security/data/cve/CVE-2019-25136.md) | Urgent | Firefox ESR: A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in… | 10.0 | 0.0066 | | | [CVE-2019-11762](https://patchblox.com/security/data/cve/CVE-2019-11762.md) | Urgent | Firefox ESR: If two same-origin documents set document.domain differently to become cross-origin, it was possible… | 6.1 | 0.0061 | | | [CVE-2020-12392](https://patchblox.com/security/data/cve/CVE-2020-12392.md) | Urgent | Firefox ESR: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request,… | 6.1 | 0.0035 | | | [CVE-2020-6811](https://patchblox.com/security/data/cve/CVE-2020-6811.md) | High | Firefox ESR: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request,… | 8.8 | 0.0327 | | | [CVE-2020-12417](https://patchblox.com/security/data/cve/CVE-2020-12417.md) | High | Firefox ESR: Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,… | 8.8 | 0.0268 | | | [CVE-2020-6806](https://patchblox.com/security/data/cve/CVE-2020-6806.md) | High | Firefox ESR: By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end… | 8.8 | 0.0261 | | | [CVE-2020-12419](https://patchblox.com/security/data/cve/CVE-2020-12419.md) | High | Firefox ESR: When processing callbacks that occurred during window flushing in the parent process, the associated… | 8.8 | 0.0232 | | | [CVE-2020-6800](https://patchblox.com/security/data/cve/CVE-2020-6800.md) | High | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox… | 8.8 | 0.0226 | | | [CVE-2020-6825](https://patchblox.com/security/data/cve/CVE-2020-6825.md) | High | Firefox ESR: Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs… | 9.8 | 0.0219 | | | [CVE-2020-12422](https://patchblox.com/security/data/cve/CVE-2020-12422.md) | High | Firefox ESR: In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable… | 8.8 | 0.0194 | | | [CVE-2020-6814](https://patchblox.com/security/data/cve/CVE-2020-6814.md) | High | Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. | 9.8 | 0.0187 | | | [CVE-2020-12420](https://patchblox.com/security/data/cve/CVE-2020-12420.md) | High | Firefox ESR: When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer,… | 8.8 | 0.0186 | | | [CVE-2019-17015](https://patchblox.com/security/data/cve/CVE-2019-17015.md) | High | Firefox ESR: During the initialization of a new content process, a pointer offset can be manipulated leading to memory… | 8.8 | 0.0181 | | | [CVE-2020-12410](https://patchblox.com/security/data/cve/CVE-2020-12410.md) | High | Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. | 8.8 | 0.0173 | | | [CVE-2020-12396](https://patchblox.com/security/data/cve/CVE-2020-12396.md) | High | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 75. | 9.8 | 0.0168 | | | [CVE-2020-12390](https://patchblox.com/security/data/cve/CVE-2020-12390.md) | High | Firefox ESR: Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. | 9.8 | 0.0162 | | | [CVE-2020-12426](https://patchblox.com/security/data/cve/CVE-2020-12426.md) | High | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 77. | 8.8 | 0.0161 | | | [CVE-2020-6823](https://patchblox.com/security/data/cve/CVE-2020-6823.md) | High | Firefox ESR: A malicious extension could have called browser.identity.launchWebAuthFlow, controlling… | 9.8 | 0.0161 | | | [CVE-2020-6799](https://patchblox.com/security/data/cve/CVE-2020-6799.md) | High | Firefox ESR: Command line arguments could have been injected during Firefox invocation as a shell handler for certain… | 8.8 | 0.0153 | | | [CVE-2020-6821](https://patchblox.com/security/data/cve/CVE-2020-6821.md) | High | Firefox ESR: When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage… | 7.5 | 0.0151 | | | [CVE-2019-11756](https://patchblox.com/security/data/cve/CVE-2019-11756.md) | High | Firefox ESR: Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited… | 8.8 | 0.0149 | | | [CVE-2020-6805](https://patchblox.com/security/data/cve/CVE-2020-6805.md) | High | Firefox ESR: When removing data about an origin whose tab was recently closed, a use-after-free could occur in the… | 8.8 | 0.0149 | | | [CVE-2020-6809](https://patchblox.com/security/data/cve/CVE-2020-6809.md) | High | Firefox ESR: When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin',… | 7.5 | 0.0148 | | | [CVE-2020-6807](https://patchblox.com/security/data/cve/CVE-2020-6807.md) | High | Firefox ESR: When a device was changed while a stream was about to be destroyed, the stream-reinit task… | 8.8 | 0.0147 | | | [CVE-2020-12391](https://patchblox.com/security/data/cve/CVE-2020-12391.md) | High | Firefox ESR: Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. | 7.5 | 0.0146 | | | [CVE-2020-6826](https://patchblox.com/security/data/cve/CVE-2020-6826.md) | High | Firefox ESR: Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in… | 9.8 | 0.0143 | | | [CVE-2020-6796](https://patchblox.com/security/data/cve/CVE-2020-6796.md) | High | Firefox ESR: A content process could have modified shared memory relating to crash reporting information, crash itself,… | 8.8 | 0.0137 | | | [CVE-2020-6815](https://patchblox.com/security/data/cve/CVE-2020-6815.md) | High | Firefox ESR: Mozilla developers reported memory safety and script safety bugs present in Firefox 73. | 9.8 | 0.0136 | | | [CVE-2020-12416](https://patchblox.com/security/data/cve/CVE-2020-12416.md) | High | Firefox ESR: A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink,… | 8.8 | 0.0135 | | | [CVE-2020-6822](https://patchblox.com/security/data/cve/CVE-2020-6822.md) | High | Firefox ESR: On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB… | 8.8 | 0.0133 | | | [CVE-2019-11734](https://patchblox.com/security/data/cve/CVE-2019-11734.md) | High | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 68. | 9.8 | 0.0130 | | | [CVE-2019-17025](https://patchblox.com/security/data/cve/CVE-2019-17025.md) | High | Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 71. | 8.8 | 0.0126 | | | [CVE-2019-17014](https://patchblox.com/security/data/cve/CVE-2019-17014.md) | High | Firefox ESR: If an image had not loaded correctly (such as when it is not actually an image), it could be dragged… | 7.4 | 0.0125 | | | [CVE-2020-6801](https://patchblox.com/security/data/cve/CVE-2020-6801.md) | High | Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 72. | 8.8 | 0.0123 | | | [CVE-2020-12409](https://patchblox.com/security/data/cve/CVE-2020-12409.md) | High | Firefox ESR: When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an… | 8.8 | 0.0118 | | | [CVE-2020-12411](https://patchblox.com/security/data/cve/CVE-2020-12411.md) | High | Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 76. | 8.8 | 0.0117 | | | [CVE-2019-11751](https://patchblox.com/security/data/cve/CVE-2019-11751.md) | High | Firefox ESR: Logging-related command line parameters are not properly sanitized when Firefox is launched by another… | 8.8 | 0.0106 | | | [CVE-2019-17019](https://patchblox.com/security/data/cve/CVE-2019-17019.md) | High | Firefox ESR: When Python was installed on Windows, a python file being served with the MIME type of text/plain could… | 8.8 | 0.0105 | | | [CVE-2019-17013](https://patchblox.com/security/data/cve/CVE-2019-17013.md) | High | Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 70. | 8.8 | 0.0103 | | | [CVE-2020-12406](https://patchblox.com/security/data/cve/CVE-2020-12406.md) | High | Firefox ESR: Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting… | 8.8 | 0.0102 | | | [CVE-2020-12393](https://patchblox.com/security/data/cve/CVE-2020-12393.md) | High | Firefox ESR: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request,… | 7.8 | 0.0101 | | | [CVE-2020-12423](https://patchblox.com/security/data/cve/CVE-2020-12423.md) | High | Firefox ESR: When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed… | 7.8 | 0.0041 | | | [CVE-2019-17009](https://patchblox.com/security/data/cve/CVE-2019-17009.md) | High | Firefox ESR: When running, the updater service wrote status and log files to an unrestricted location; potentially… | 7.8 | 0.0033 | | | [CVE-2019-11753](https://patchblox.com/security/data/cve/CVE-2019-11753.md) | High | Firefox ESR: The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected… | 7.8 | 0.0023 | | | [CVE-2019-11736](https://patchblox.com/security/data/cve/CVE-2019-11736.md) | High | Firefox ESR: The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the… | 7.0 | 0.0021 | | | [CVE-2020-12418](https://patchblox.com/security/data/cve/CVE-2020-12418.md) | Routine | Firefox ESR: Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process… | 6.5 | 0.0303 | | | [CVE-2020-6798](https://patchblox.com/security/data/cve/CVE-2020-6798.md) | Routine | Firefox ESR: If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing… | 6.1 | 0.0205 | | | [CVE-2019-17021](https://patchblox.com/security/data/cve/CVE-2019-17021.md) | Routine | Firefox ESR: During the initialization of a new content process, a race condition occurs that can allow a content… | 5.3 | 0.0187 | | | [CVE-2020-12421](https://patchblox.com/security/data/cve/CVE-2020-12421.md) | Routine | Firefox ESR: When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even… | 6.5 | 0.0184 | | | [CVE-2020-12424](https://patchblox.com/security/data/cve/CVE-2020-12424.md) | Routine | Firefox ESR: When constructing a permission prompt for WebRTC, a URI was supplied from the content process. | 6.5 | 0.0161 | | | [CVE-2020-6812](https://patchblox.com/security/data/cve/CVE-2020-6812.md) | Routine | Firefox ESR: The first time AirPods are connected to an iPhone, they become named after the user's name by default… | 6.1 | 0.0160 | | | [CVE-2020-12425](https://patchblox.com/security/data/cve/CVE-2020-12425.md) | Routine | Firefox ESR: Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have… | 6.5 | 0.0157 | | | [CVE-2020-12405](https://patchblox.com/security/data/cve/CVE-2020-12405.md) | Routine | Firefox ESR: When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a… | 5.3 | 0.0135 | | | [CVE-2019-17023](https://patchblox.com/security/data/cve/CVE-2019-17023.md) | Routine | Firefox ESR: After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting… | 6.5 | 0.0134 | | | [CVE-2020-12415](https://patchblox.com/security/data/cve/CVE-2020-12415.md) | Routine | Firefox ESR: When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed… | 6.5 | 0.0127 | | | [CVE-2020-6813](https://patchblox.com/security/data/cve/CVE-2020-6813.md) | Routine | Firefox ESR: When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in… | 5.3 | 0.0122 | | | [CVE-2020-15648](https://patchblox.com/security/data/cve/CVE-2020-15648.md) | Routine | Firefox ESR: Using object or embed tags, it was possible to frame other websites, even if they disallowed framing… | 6.5 | 0.0114 | | | [CVE-2019-17020](https://patchblox.com/security/data/cve/CVE-2019-17020.md) | Routine | Firefox ESR: If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet,… | 6.5 | 0.0114 | | | [CVE-2020-6808](https://patchblox.com/security/data/cve/CVE-2020-6808.md) | Routine | Firefox ESR: When a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to… | 6.5 | 0.0110 | | | [CVE-2020-6810](https://patchblox.com/security/data/cve/CVE-2020-6810.md) | Routine | Firefox ESR: After a website had entered fullscreen mode, it could have used a previously opened popup to obscure… | 4.3 | 0.0103 | | | [CVE-2020-12407](https://patchblox.com/security/data/cve/CVE-2020-12407.md) | Routine | Firefox ESR: Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions… | 6.5 | 0.0097 | | | [CVE-2020-12408](https://patchblox.com/security/data/cve/CVE-2020-12408.md) | Routine | Firefox ESR: When browsing a document hosted on an IP address, an attacker could insert certain characters to flip… | 6.5 | 0.0096 | | | [CVE-2019-17018](https://patchblox.com/security/data/cve/CVE-2019-17018.md) | Routine | Firefox ESR: When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve… | 5.3 | 0.0088 | | | [CVE-2019-11765](https://patchblox.com/security/data/cve/CVE-2019-11765.md) | Routine | Firefox ESR: A compromised content process could send a message to the parent process that would cause the 'Click… | 6.5 | 0.0084 | | | [CVE-2019-17000](https://patchblox.com/security/data/cve/CVE-2019-17000.md) | Routine | Firefox ESR: An object tag with a data URI did not correctly inherit the document's Content Security Policy. | 6.1 | 0.0081 | | | [CVE-2020-12412](https://patchblox.com/security/data/cve/CVE-2020-12412.md) | Routine | Firefox ESR: By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect… | 4.3 | 0.0078 | | | [CVE-2019-17002](https://patchblox.com/security/data/cve/CVE-2019-17002.md) | Routine | Firefox ESR: If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and… | 4.3 | 0.0073 | | | [CVE-2020-12399](https://patchblox.com/security/data/cve/CVE-2020-12399.md) | Routine | Firefox ESR: NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually… | 4.4 | 0.0065 | | | [CVE-2019-11754](https://patchblox.com/security/data/cve/CVE-2019-11754.md) | Routine | Firefox ESR: When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. | 4.3 | 0.0062 | | | [CVE-2020-12413](https://patchblox.com/security/data/cve/CVE-2020-12413.md) | Routine | Firefox ESR: Observable Discrepancy | 5.9 | 0.0059 | | | [CVE-2019-11741](https://patchblox.com/security/data/cve/CVE-2019-11741.md) | Routine | Firefox ESR: A compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS) attack on… | 6.1 | 0.0059 | | | [CVE-2019-11737](https://patchblox.com/security/data/cve/CVE-2019-11737.md) | Routine | Firefox ESR: If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or… | 5.3 | 0.0055 | | | [CVE-2020-12402](https://patchblox.com/security/data/cve/CVE-2020-12402.md) | Routine | Firefox ESR: During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm… | 4.4 | 0.0034 | | | [CVE-2020-12394](https://patchblox.com/security/data/cve/CVE-2020-12394.md) | Routine | Firefox ESR: A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current… | 3.3 | 0.0029 | | | [CVE-2020-6824](https://patchblox.com/security/data/cve/CVE-2020-6824.md) | Routine | Firefox ESR: Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the… | 2.8 | 0.0027 | | --- Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.