{
  "fix": "Mozilla Firefox ESR (en-US) 91.0",
  "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-91.0",
  "summary": "Mozilla Firefox ESR (en-US) 91.0, released August 4, 2021, fixes 129 CVEs in Mozilla Firefox ESR (en-US). None of them is reported as exploited. Patch Radar priority: Urgent. The latest Mozilla Firefox ESR (en-US) is 153.6.0, which also fixes every one of these CVEs.",
  "platform": "windows-app",
  "type": "app-version",
  "title": "Mozilla Firefox ESR (en-US) 91.0",
  "released": "2021-08-04T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2020-26950, rated Critical",
  "supported": true,
  "cveCount": 129,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.42327,
  "maxCvss": 9.8,
  "appliesTo": [
    {
      "product": "Mozilla Firefox ESR (en-US)",
      "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-firefox-esr-en-us",
      "fixedVersion": "91.0",
      "latestVersion": "153.6.0",
      "supported": true
    }
  ],
  "supersededBy": {
    "product": "Mozilla Firefox ESR (en-US)",
    "latestVersion": "153.6.0",
    "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-firefox-esr-en-us"
  },
  "cves": [
    {
      "cveId": "CVE-2020-26950",
      "url": "https://patchblox.com/security/cve/CVE-2020-26950",
      "title": "Firefox ESR and 2 others: In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.42327,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23978",
      "url": "https://patchblox.com/security/cve/CVE-2021-23978",
      "title": "Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.0153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29967",
      "url": "https://patchblox.com/security/cve/CVE-2021-29967",
      "title": "Firefox ESR and 3 others: Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11.",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 8.8,
      "epss": 0.01368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23973",
      "url": "https://patchblox.com/security/cve/CVE-2021-23973",
      "title": "Firefox ESR and 2 others: When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted,\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 6.5,
      "epss": 0.01368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23968",
      "url": "https://patchblox.com/security/cve/CVE-2021-23968",
      "title": "Firefox ESR and 2 others: If Content Security Policy blocked frame navigation, the full destination of a redirect served in the\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 4.3,
      "epss": 0.01307,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23969",
      "url": "https://patchblox.com/security/cve/CVE-2021-23969",
      "title": "Firefox ESR and 2 others: As specified in the W3C Content Security Policy draft, when creating a violation report, \u0022User agents\u2026",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 4.3,
      "epss": 0.01212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15663",
      "url": "https://patchblox.com/security/cve/CVE-2020-15663",
      "title": "Firefox ESR and 2 others: If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe\u2026",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.02716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15683",
      "url": "https://patchblox.com/security/cve/CVE-2020-15683",
      "title": "Firefox ESR and 2 others: Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.02674,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15659",
      "url": "https://patchblox.com/security/cve/CVE-2020-15659",
      "title": "Firefox ESR and 2 others: Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.02391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15673",
      "url": "https://patchblox.com/security/cve/CVE-2020-15673",
      "title": "Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01961,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26971",
      "url": "https://patchblox.com/security/cve/CVE-2020-26971",
      "title": "Firefox ESR and 2 others: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01899,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15678",
      "url": "https://patchblox.com/security/cve/CVE-2020-15678",
      "title": "Firefox ESR and 2 others: When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01882,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23994",
      "url": "https://patchblox.com/security/cve/CVE-2021-23994",
      "title": "Firefox ESR and 2 others: A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01756,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15667",
      "url": "https://patchblox.com/security/cve/CVE-2020-15667",
      "title": "Firefox ESR and 1 other: When processing a MAR update file, after the signature has been validated, an invalid name length could\u2026",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.01647,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26973",
      "url": "https://patchblox.com/security/cve/CVE-2020-26973",
      "title": "Firefox ESR and 2 others: Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01623,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-35113",
      "url": "https://patchblox.com/security/cve/CVE-2020-35113",
      "title": "Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01572,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26960",
      "url": "https://patchblox.com/security/cve/CVE-2020-26960",
      "title": "Firefox ESR and 2 others: If the Compact() method was called on an nsTArray, the array could have been reallocated without updating\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01563,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26974",
      "url": "https://patchblox.com/security/cve/CVE-2020-26974",
      "title": "Firefox ESR and 2 others: When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01533,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15656",
      "url": "https://patchblox.com/security/cve/CVE-2020-15656",
      "title": "Firefox ESR and 2 others: JIT optimizations involving the Javascript arguments object could confuse later optimizations.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26968",
      "url": "https://patchblox.com/security/cve/CVE-2020-26968",
      "title": "Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23961",
      "url": "https://patchblox.com/security/cve/CVE-2021-23961",
      "title": "Firefox ESR and 1 other: Further techniques that built on the slipstream research combined with a malicious webpage could have\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.4,
      "epss": 0.01477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29985",
      "url": "https://patchblox.com/security/cve/CVE-2021-29985",
      "title": "Firefox ESR and 3 others: A use-after-free vulnerability in media channels could have led to memory corruption and a potentially\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01451,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29970",
      "url": "https://patchblox.com/security/cve/CVE-2021-29970",
      "title": "Firefox ESR and 3 others: A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01428,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23987",
      "url": "https://patchblox.com/security/cve/CVE-2021-23987",
      "title": "Firefox ESR and 2 others: Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01416,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29980",
      "url": "https://patchblox.com/security/cve/CVE-2021-29980",
      "title": "Firefox ESR and 3 others: Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01399,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29984",
      "url": "https://patchblox.com/security/cve/CVE-2021-29984",
      "title": "Firefox ESR and 3 others: Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01386,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29988",
      "url": "https://patchblox.com/security/cve/CVE-2021-29988",
      "title": "Firefox ESR and 3 others: Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23999",
      "url": "https://patchblox.com/security/cve/CVE-2021-23999",
      "title": "Firefox ESR and 2 others: If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01372,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23964",
      "url": "https://patchblox.com/security/cve/CVE-2021-23964",
      "title": "Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01361,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15684",
      "url": "https://patchblox.com/security/cve/CVE-2020-15684",
      "title": "Firefox ESR and 1 other: Mozilla developers reported memory safety bugs present in Firefox 81.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.01345,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26972",
      "url": "https://patchblox.com/security/cve/CVE-2020-26972",
      "title": "Firefox ESR and 1 other: The lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.0131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29946",
      "url": "https://patchblox.com/security/cve/CVE-2021-29946",
      "title": "Firefox ESR and 2 others: Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01303,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26959",
      "url": "https://patchblox.com/security/cve/CVE-2020-26959",
      "title": "Firefox ESR and 2 others: During browser shutdown, reference decrementing could have occured on a previously freed object, resulting\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01297,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23960",
      "url": "https://patchblox.com/security/cve/CVE-2021-23960",
      "title": "Firefox ESR and 2 others: Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01289,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-35112",
      "url": "https://patchblox.com/security/cve/CVE-2020-35112",
      "title": "Firefox ESR and 2 others: If a user downloaded a file lacking an extension on Windows, and then \u0022Open\u0022-ed it from the downloads\u2026",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.01274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29989",
      "url": "https://patchblox.com/security/cve/CVE-2021-29989",
      "title": "Firefox ESR and 3 others: Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01268,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29976",
      "url": "https://patchblox.com/security/cve/CVE-2021-29976",
      "title": "Firefox ESR and 3 others: Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26969",
      "url": "https://patchblox.com/security/cve/CVE-2020-26969",
      "title": "Firefox ESR and 1 other: Mozilla developers reported memory safety bugs present in Firefox 82.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23954",
      "url": "https://patchblox.com/security/cve/CVE-2021-23954",
      "title": "Firefox ESR and 2 others: Using the new logical assignment operators in a JavaScript switch statement could have caused a type\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23995",
      "url": "https://patchblox.com/security/cve/CVE-2021-23995",
      "title": "Firefox ESR and 2 others: When Responsive Design Mode was enabled, it used references to objects that were previously freed.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26952",
      "url": "https://patchblox.com/security/cve/CVE-2020-26952",
      "title": "Firefox ESR and 1 other: Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23981",
      "url": "https://patchblox.com/security/cve/CVE-2021-23981",
      "title": "Firefox ESR and 2 others: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.01145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-24002",
      "url": "https://patchblox.com/security/cve/CVE-2021-24002",
      "title": "Firefox ESR and 2 others: When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15681",
      "url": "https://patchblox.com/security/cve/CVE-2020-15681",
      "title": "Firefox ESR and 1 other: When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.01091,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23988",
      "url": "https://patchblox.com/security/cve/CVE-2021-23988",
      "title": "Firefox ESR and 1 other: Mozilla developers reported memory safety bugs present in Firefox 86.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01076,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15670",
      "url": "https://patchblox.com/security/cve/CVE-2020-15670",
      "title": "Firefox ESR and 2 others: Mozilla developers reported memory safety bugs present in Firefox for Android 79.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01071,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-35114",
      "url": "https://patchblox.com/security/cve/CVE-2020-35114",
      "title": "Firefox ESR and 1 other: Mozilla developers reported memory safety bugs present in Firefox 83.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29972",
      "url": "https://patchblox.com/security/cve/CVE-2021-29972",
      "title": "Firefox ESR and 1 other: A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29966",
      "url": "https://patchblox.com/security/cve/CVE-2021-29966",
      "title": "Mozilla Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 88.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01022,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15675",
      "url": "https://patchblox.com/security/cve/CVE-2020-15675",
      "title": "Firefox ESR and 1 other: When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23972",
      "url": "https://patchblox.com/security/cve/CVE-2021-23972",
      "title": "Firefox ESR and 1 other: One phishing tactic on the web is to provide a link with HTTP Auth.",
      "priority": "High",
      "severity": "Low",
      "cvss": 8.8,
      "epss": 0.01013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29981",
      "url": "https://patchblox.com/security/cve/CVE-2021-29981",
      "title": "Firefox ESR and 3 others: An issue present in lowering/register allocation could have led to obscure but deterministic register\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29977",
      "url": "https://patchblox.com/security/cve/CVE-2021-29977",
      "title": "Firefox ESR and 1 other: Mozilla developers reported memory safety bugs present in Firefox 89.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01009,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29990",
      "url": "https://patchblox.com/security/cve/CVE-2021-29990",
      "title": "Firefox ESR and 1 other: Mozilla developers and community members reported memory safety bugs present in Firefox 90.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01009,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23965",
      "url": "https://patchblox.com/security/cve/CVE-2021-23965",
      "title": "Firefox ESR and 1 other: Mozilla developers reported memory safety bugs present in Firefox 84.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00969,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23979",
      "url": "https://patchblox.com/security/cve/CVE-2021-23979",
      "title": "Firefox ESR and 1 other: Mozilla developers reported memory safety bugs present in Firefox 85.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00925,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23962",
      "url": "https://patchblox.com/security/cve/CVE-2021-23962",
      "title": "Firefox ESR and 1 other: Incorrect use of the \u0027\u003CRowCountChanged\u003E\u0027 method could have led to a user-after-poison and a potentially\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00886,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29947",
      "url": "https://patchblox.com/security/cve/CVE-2021-29947",
      "title": "Firefox ESR and 1 other: Mozilla developers and community members reported memory safety bugs present in Firefox 87.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00867,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29968",
      "url": "https://patchblox.com/security/cve/CVE-2021-29968",
      "title": "Firefox ESR and 1 other: When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur.",
      "priority": "High",
      "cvss": 8.1,
      "epss": 0.00826,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23997",
      "url": "https://patchblox.com/security/cve/CVE-2021-23997",
      "title": "Firefox ESR and 1 other: Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00816,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29964",
      "url": "https://patchblox.com/security/cve/CVE-2021-29964",
      "title": "Firefox ESR and 3 others: A locally-installed hostile program could send \u0060WM_COPYDATA\u0060 messages that Firefox would process incorrectly,\u2026",
      "priority": "High",
      "cvss": 7.1,
      "epss": 0.00816,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15674",
      "url": "https://patchblox.com/security/cve/CVE-2020-15674",
      "title": "Firefox ESR and 1 other: Mozilla developers reported memory safety bugs present in Firefox 80.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00806,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29952",
      "url": "https://patchblox.com/security/cve/CVE-2021-29952",
      "title": "Firefox ESR and 1 other: When Web Render components were destructed, a race condition could have caused undefined behavior, and\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00736,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15657",
      "url": "https://patchblox.com/security/cve/CVE-2020-15657",
      "title": "Firefox ESR and 2 others: Firefox could be made to load attacker-supplied DLL files from the installation directory.",
      "priority": "High",
      "cvss": 7.8,
      "epss": 0.00353,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-16012",
      "url": "https://patchblox.com/security/cve/CVE-2020-16012",
      "title": "Firefox ESR and 1 other: Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.3,
      "epss": 0.02571,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29951",
      "url": "https://patchblox.com/security/cve/CVE-2021-29951",
      "title": "Firefox ESR and 3 others: The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network,\u2026",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.01852,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15677",
      "url": "https://patchblox.com/security/cve/CVE-2020-15677",
      "title": "Firefox ESR and 2 others: By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.01657,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26976",
      "url": "https://patchblox.com/security/cve/CVE-2020-26976",
      "title": "Firefox ESR and 1 other: When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former,\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15676",
      "url": "https://patchblox.com/security/cve/CVE-2020-15676",
      "title": "Firefox ESR and 2 others: Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.01594,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15655",
      "url": "https://patchblox.com/security/cve/CVE-2020-15655",
      "title": "Firefox ESR and 2 others: A redirected HTTP request which is observed or modified through a web extension could bypass existing\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.0152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23985",
      "url": "https://patchblox.com/security/cve/CVE-2021-23985",
      "title": "Firefox ESR and 1 other: If an attacker is able to alter specific about:config values (for example malware running on the user\u0027s\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 6.5,
      "epss": 0.01506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29955",
      "url": "https://patchblox.com/security/cve/CVE-2021-29955",
      "title": "Firefox ESR and 1 other: A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.3,
      "epss": 0.01481,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-6829",
      "url": "https://patchblox.com/security/cve/CVE-2020-6829",
      "title": "Firefox ESR and 1 other: When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which\u2026",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.01479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-35111",
      "url": "https://patchblox.com/security/cve/CVE-2020-35111",
      "title": "Firefox ESR and 2 others: When an extension with the proxy permission registered to receive \u003Call_urls\u003E, the proxy.onRequest callback\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.3,
      "epss": 0.01432,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15654",
      "url": "https://patchblox.com/security/cve/CVE-2020-15654",
      "title": "Firefox ESR and 2 others: When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01423,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15653",
      "url": "https://patchblox.com/security/cve/CVE-2020-15653",
      "title": "Firefox ESR and 2 others: An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links.",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15664",
      "url": "https://patchblox.com/security/cve/CVE-2020-15664",
      "title": "Firefox ESR and 2 others: By holding a reference to the eval() function from an about:blank window, a malicious webpage could have\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15658",
      "url": "https://patchblox.com/security/cve/CVE-2020-15658",
      "title": "Firefox ESR and 2 others: The code for downloading files did not properly take care of special characters, which led to an attacker\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01388,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26958",
      "url": "https://patchblox.com/security/cve/CVE-2020-26958",
      "title": "Firefox ESR and 2 others: Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.01364,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26966",
      "url": "https://patchblox.com/security/cve/CVE-2020-26966",
      "title": "Firefox ESR and 2 others: Searching for a single word from the address bar caused an mDNS request to be sent on the local network\u2026",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.01354,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26978",
      "url": "https://patchblox.com/security/cve/CVE-2020-26978",
      "title": "Firefox ESR and 2 others: Using techniques that built on the slipstream research, a malicious webpage could have exposed both an\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.01334,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26953",
      "url": "https://patchblox.com/security/cve/CVE-2020-26953",
      "title": "Firefox ESR and 2 others: It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.3,
      "epss": 0.01293,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15652",
      "url": "https://patchblox.com/security/cve/CVE-2020-15652",
      "title": "Firefox ESR and 2 others: By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01263,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26965",
      "url": "https://patchblox.com/security/cve/CVE-2020-26965",
      "title": "Firefox ESR and 2 others: Some websites have a feature \u0022Show Password\u0022 where clicking a button will change a password field into\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15666",
      "url": "https://patchblox.com/security/cve/CVE-2020-15666",
      "title": "Firefox ESR and 1 other: When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500,\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 6.5,
      "epss": 0.01238,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26956",
      "url": "https://patchblox.com/security/cve/CVE-2020-26956",
      "title": "Firefox ESR and 2 others: In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.01233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29945",
      "url": "https://patchblox.com/security/cve/CVE-2021-29945",
      "title": "Firefox ESR and 2 others: The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26961",
      "url": "https://patchblox.com/security/cve/CVE-2020-26961",
      "title": "Firefox ESR and 2 others: When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29982",
      "url": "https://patchblox.com/security/cve/CVE-2021-29982",
      "title": "Firefox ESR and 3 others: Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 6.5,
      "epss": 0.01124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23984",
      "url": "https://patchblox.com/security/cve/CVE-2021-23984",
      "title": "Firefox ESR and 2 others: A malicious extension could have opened a popup window lacking an address bar.",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.01113,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23953",
      "url": "https://patchblox.com/security/cve/CVE-2021-23953",
      "title": "Firefox ESR and 2 others: If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.3,
      "epss": 0.01056,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26951",
      "url": "https://patchblox.com/security/cve/CVE-2020-26951",
      "title": "Firefox ESR and 2 others: A parsing and event loading mismatch in Firefox\u0027s SVG code could have allowed load events to fire, even\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.01051,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23975",
      "url": "https://patchblox.com/security/cve/CVE-2021-23975",
      "title": "Firefox ESR and 1 other: The developer page about:memory has a Measure function for exploring what object types the browser has\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 6.5,
      "epss": 0.01012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23970",
      "url": "https://patchblox.com/security/cve/CVE-2021-23970",
      "title": "Firefox ESR and 1 other: Context-specific code was included in a shared jump table; resulting in assertions being triggered in\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.01007,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23971",
      "url": "https://patchblox.com/security/cve/CVE-2021-23971",
      "title": "Firefox ESR and 1 other: When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect\u0027s\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.01007,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23956",
      "url": "https://patchblox.com/security/cve/CVE-2021-23956",
      "title": "Firefox ESR and 1 other: An ambiguous file picker design could have confused users who intended to select and upload a single\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00993,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29975",
      "url": "https://patchblox.com/security/cve/CVE-2021-29975",
      "title": "Firefox ESR and 1 other: Through a series of DOM manipulations, a message, over which the attacker had control of the text but\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00961,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15680",
      "url": "https://patchblox.com/security/cve/CVE-2020-15680",
      "title": "Firefox ESR and 1 other: If a valid external protocol handler was referenced in an image tag, the resulting broken image size\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.3,
      "epss": 0.00947,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23958",
      "url": "https://patchblox.com/security/cve/CVE-2021-23958",
      "title": "Firefox ESR and 1 other: The browser could have been confused into transferring a screen sharing state into another tab, which\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00877,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26975",
      "url": "https://patchblox.com/security/cve/CVE-2020-26975",
      "title": "Firefox ESR and 1 other: When a malicious application installed on the user\u0027s device broadcast an Intent to Firefox for Android,\u2026",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00875,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26977",
      "url": "https://patchblox.com/security/cve/CVE-2020-26977",
      "title": "Firefox ESR and 1 other: By attempting to connect a website using an unresponsive port, an attacker could have controlled the\u2026",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00869,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26967",
      "url": "https://patchblox.com/security/cve/CVE-2020-26967",
      "title": "Firefox ESR and 1 other: When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 6.5,
      "epss": 0.0085,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26963",
      "url": "https://patchblox.com/security/cve/CVE-2020-26963",
      "title": "Firefox ESR and 1 other: Repeated calls to the history and location interfaces could have been used to hang the browser.",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.3,
      "epss": 0.00846,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29974",
      "url": "https://patchblox.com/security/cve/CVE-2021-29974",
      "title": "Firefox ESR and 1 other: When network partitioning was enabled, e.g.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.0084,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29959",
      "url": "https://patchblox.com/security/cve/CVE-2021-29959",
      "title": "Mozilla Firefox ESR: When a user has already allowed a website to access microphone and camera, disabling camera sharing would\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00839,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26955",
      "url": "https://patchblox.com/security/cve/CVE-2020-26955",
      "title": "Firefox ESR and 1 other: When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent\u2026",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00833,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29960",
      "url": "https://patchblox.com/security/cve/CVE-2021-29960",
      "title": "Mozilla Firefox ESR: Firefox used to cache the last filename used for printing a file.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00829,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29961",
      "url": "https://patchblox.com/security/cve/CVE-2021-29961",
      "title": "Mozilla Firefox ESR: When styling and rendering an oversized \u0060\u003Cselect\u003E\u0060 element, Firefox did not apply correct clipping which\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.0076,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23974",
      "url": "https://patchblox.com/security/cve/CVE-2021-23974",
      "title": "Firefox ESR and 1 other: The DOMParser API did not properly process \u0027\u003Cnoscript\u003E\u0027 elements for escaping.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.1,
      "epss": 0.00753,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23982",
      "url": "https://patchblox.com/security/cve/CVE-2021-23982",
      "title": "Firefox ESR and 2 others: Using techniques that built on the slipstream research, a malicious webpage could have scanned both an\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.00743,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23983",
      "url": "https://patchblox.com/security/cve/CVE-2021-23983",
      "title": "Firefox ESR and 1 other: By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00736,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26979",
      "url": "https://patchblox.com/security/cve/CVE-2020-26979",
      "title": "Firefox ESR and 1 other: When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 6.1,
      "epss": 0.00726,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23996",
      "url": "https://patchblox.com/security/cve/CVE-2021-23996",
      "title": "Firefox ESR and 1 other: By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage\u0027s\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00719,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29944",
      "url": "https://patchblox.com/security/cve/CVE-2021-29944",
      "title": "Firefox ESR and 1 other: Lack of escaping allowed HTML injection when a webpage was viewed in Reader View.",
      "priority": "Routine",
      "cvss": 6.1,
      "epss": 0.00702,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26962",
      "url": "https://patchblox.com/security/cve/CVE-2020-26962",
      "title": "Firefox ESR and 1 other: Cross-origin iframes that contained a login form could have been recognized by the login autofill service,\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 6.1,
      "epss": 0.00698,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15665",
      "url": "https://patchblox.com/security/cve/CVE-2020-15665",
      "title": "Firefox ESR and 1 other: Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00686,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23955",
      "url": "https://patchblox.com/security/cve/CVE-2021-23955",
      "title": "Firefox ESR and 1 other: The browser could have been confused into transferring a pointer lock state into another tab, which could\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.1,
      "epss": 0.00657,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23963",
      "url": "https://patchblox.com/security/cve/CVE-2021-23963",
      "title": "Firefox ESR and 1 other: When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00657,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-29953",
      "url": "https://patchblox.com/security/cve/CVE-2021-29953",
      "title": "Firefox ESR and 1 other: A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript\u2026",
      "priority": "Routine",
      "cvss": 6.1,
      "epss": 0.00647,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26954",
      "url": "https://patchblox.com/security/cve/CVE-2020-26954",
      "title": "Firefox ESR and 1 other: When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from\u2026",
      "priority": "Routine",
      "cvss": 4.3,
      "epss": 0.00643,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-24000",
      "url": "https://patchblox.com/security/cve/CVE-2021-24000",
      "title": "Firefox ESR and 1 other: A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 3.1,
      "epss": 0.00605,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23998",
      "url": "https://patchblox.com/security/cve/CVE-2021-23998",
      "title": "Firefox ESR and 2 others: Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon\u2026",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.00594,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-24001",
      "url": "https://patchblox.com/security/cve/CVE-2021-24001",
      "title": "Firefox ESR and 1 other: A compromised content process could have performed session history manipulations it should not have been\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.0057,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-26957",
      "url": "https://patchblox.com/security/cve/CVE-2020-26957",
      "title": "Firefox ESR and 1 other: OneCRL was non-functional in the new Firefox for Android due to a missing service initialization.",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00553,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15668",
      "url": "https://patchblox.com/security/cve/CVE-2020-15668",
      "title": "Firefox ESR and 1 other: A lock was missing when accessing a data structure and importing certificate information into the trust\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.3,
      "epss": 0.00539,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-15682",
      "url": "https://patchblox.com/security/cve/CVE-2020-15682",
      "title": "Firefox ESR and 1 other: When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose\u2026",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 6.5,
      "epss": 0.0048,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-23986",
      "url": "https://patchblox.com/security/cve/CVE-2021-23986",
      "title": "Firefox ESR and 1 other: A malicious extension with the \u0027search\u0027 permission could have installed a new search engine whose favicon\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00434,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12401",
      "url": "https://patchblox.com/security/cve/CVE-2020-12401",
      "title": "Firefox ESR and 1 other: During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.7,
      "epss": 0.00326,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-12400",
      "url": "https://patchblox.com/security/cve/CVE-2020-12400",
      "title": "Firefox ESR and 1 other: When converting coordinates from projective to affine, the modular inversion was not performed in constant\u2026",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 4.7,
      "epss": 0.0027,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}