# Mozilla Firefox ESR (mk) 140.3.0

Mozilla Firefox ESR (mk) 140.3.0, released September 16, 2025, fixes 142 CVEs in Mozilla Firefox ESR (mk). One of them is being exploited (CVE-2024-9680); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Mozilla Firefox ESR (mk) is 153.7.0, which also fixes every one of these CVEs.

- Web page: https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr.mk-140.3.0
- Platform: Windows apps
- Released: Sep 16, 2025
- Priority: Patch now (Closes CVE-2024-9680, exploited (CISA KEV, ransomware))
- CVEs: 142, exploited: 1, on CISA KEV: 1
- Superseded by: [Mozilla Firefox ESR (mk) 153.7.0](https://patchblox.com/security/data/product/windows-app/mozilla-firefox-esr-mk.md), the latest version, which also fixes every CVE listed here

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Mozilla Firefox ESR (mk)](https://patchblox.com/security/data/product/windows-app/mozilla-firefox-esr-mk.md) |  | 140.3.0 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-9680](https://patchblox.com/security/data/cve/CVE-2024-9680.md) | Patch now | Mozilla Firefox Use-After-Free Vulnerability | 9.8 | 0.2318 | CISA KEV, Ransomware |
| [CVE-2025-2857](https://patchblox.com/security/data/cve/CVE-2025-2857.md) | Urgent | Incorrect handle could lead to sandbox escapes | 10.0 | 0.0198 |  |
| [CVE-2024-11704](https://patchblox.com/security/data/cve/CVE-2024-11704.md) | Urgent | Mozilla Firefox ESR and 8 others: Double Free | 9.8 | 0.0091 |  |
| [CVE-2024-11693](https://patchblox.com/security/data/cve/CVE-2024-11693.md) | Urgent | Mozilla Firefox ESR and 8 others: The executable file warning was not presented when downloading .library-ms files. | 9.8 | 0.0083 |  |
| [CVE-2025-49710](https://patchblox.com/security/data/cve/CVE-2025-49710.md) | Urgent | Integer overflow in OrderedHashTable | 9.8 | 0.0075 |  |
| [CVE-2025-49709](https://patchblox.com/security/data/cve/CVE-2025-49709.md) | Urgent | Memory corruption in canvas surfaces | 9.8 | 0.0067 |  |
| [CVE-2024-10004](https://patchblox.com/security/data/cve/CVE-2024-10004.md) | Urgent | Mozilla Firefox ESR and 4 others: Improper Restriction of Rendered UI Layers or Frames | 9.1 | 0.0038 |  |
| [CVE-2025-1941](https://patchblox.com/security/data/cve/CVE-2025-1941.md) | Urgent | Lock screen setting bypass in Firefox Focus for Android | 9.1 | 0.0037 |  |
| [CVE-2025-0242](https://patchblox.com/security/data/cve/CVE-2025-0242.md) | High | Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 | 8.8 | 0.1472 |  |
| [CVE-2025-0247](https://patchblox.com/security/data/cve/CVE-2025-0247.md) | High | Memory safety bugs fixed in Firefox 134 and Thunderbird 134 | 9.8 | 0.1070 |  |
| [CVE-2025-4918](https://patchblox.com/security/data/cve/CVE-2025-4918.md) | High | Out-of-bounds access when resolving Promise objects | 9.8 | 0.0952 |  |
| [CVE-2025-4919](https://patchblox.com/security/data/cve/CVE-2025-4919.md) | High | Out-of-bounds access when optimizing linear sums | 8.8 | 0.0912 |  |
| [CVE-2025-6424](https://patchblox.com/security/data/cve/CVE-2025-6424.md) | High | Use-after-free in FontFaceSet | 9.8 | 0.0790 |  |
| [CVE-2024-8381](https://patchblox.com/security/data/cve/CVE-2024-8381.md) | High | Mozilla Firefox ESR and 6 others: Access of Resource Using Incompatible Type ('Type Confusion') | 9.8 | 0.0440 |  |
| [CVE-2025-6436](https://patchblox.com/security/data/cve/CVE-2025-6436.md) | High | Memory safety bugs fixed in Firefox 140 and Thunderbird 140 | 8.1 | 0.0426 |  |
| [CVE-2025-1009](https://patchblox.com/security/data/cve/CVE-2025-1009.md) | High | Use-after-free in XSLT | 9.8 | 0.0120 |  |
| [CVE-2025-3028](https://patchblox.com/security/data/cve/CVE-2025-3028.md) | High | Use-after-free triggered by XSLTProcessor | 8.8 | 0.0087 |  |
| [CVE-2024-10466](https://patchblox.com/security/data/cve/CVE-2024-10466.md) | High | Mozilla Firefox ESR and 7 others: Uncontrolled Resource Consumption | 7.5 | 0.0081 |  |
| [CVE-2024-11697](https://patchblox.com/security/data/cve/CVE-2024-11697.md) | High | Mozilla Firefox ESR and 8 others: Improper Control of Generation of Code ('Code Injection') | 8.8 | 0.0081 |  |
| [CVE-2024-9401](https://patchblox.com/security/data/cve/CVE-2024-9401.md) | High | Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer | 9.8 | 0.0074 |  |
| [CVE-2025-0241](https://patchblox.com/security/data/cve/CVE-2025-0241.md) | High | Memory corruption when using JavaScript Text Segmentation | 7.7 | 0.0073 |  |
| [CVE-2024-11699](https://patchblox.com/security/data/cve/CVE-2024-11699.md) | High | Mozilla Firefox ESR and 8 others: Improper Control of Generation of Code ('Code Injection') | 8.8 | 0.0072 |  |
| [CVE-2024-8384](https://patchblox.com/security/data/cve/CVE-2024-8384.md) | High | Mozilla Firefox ESR and 6 others: Use After Free | 9.8 | 0.0072 |  |
| [CVE-2025-2817](https://patchblox.com/security/data/cve/CVE-2025-2817.md) | High | Privilege escalation in Thunderbird Updater | 8.8 | 0.0067 |  |
| [CVE-2024-11705](https://patchblox.com/security/data/cve/CVE-2024-11705.md) | High | Mozilla Firefox ESR and 8 others: NULL Pointer Dereference | 9.1 | 0.0066 |  |
| [CVE-2024-10458](https://patchblox.com/security/data/cve/CVE-2024-10458.md) | High | Mozilla Firefox ESR and 7 others: Improper Preservation of Permissions | 8.2 | 0.0064 |  |
| [CVE-2024-7520](https://patchblox.com/security/data/cve/CVE-2024-7520.md) | High | Mozilla Firefox ESR and 6 others: Improper Control of Generation of Code ('Code Injection') | 9.6 | 0.0064 |  |
| [CVE-2024-8383](https://patchblox.com/security/data/cve/CVE-2024-8383.md) | High | Mozilla Firefox ESR and 4 others: Initialization of a Resource with an Insecure Default | 7.5 | 0.0064 |  |
| [CVE-2024-7522](https://patchblox.com/security/data/cve/CVE-2024-7522.md) | High | Mozilla Firefox ESR and 6 others: Out-of-bounds Read | 9.6 | 0.0063 |  |
| [CVE-2024-10459](https://patchblox.com/security/data/cve/CVE-2024-10459.md) | High | Mozilla Firefox ESR and 7 others: Use After Free | 7.6 | 0.0063 |  |
| [CVE-2024-10467](https://patchblox.com/security/data/cve/CVE-2024-10467.md) | High | Mozilla Firefox ESR and 7 others: Out-of-bounds Read | 8.8 | 0.0063 |  |
| [CVE-2024-7519](https://patchblox.com/security/data/cve/CVE-2024-7519.md) | High | Mozilla Firefox ESR and 6 others: Out-of-bounds Write | 9.6 | 0.0063 |  |
| [CVE-2025-1011](https://patchblox.com/security/data/cve/CVE-2025-1011.md) | High | A bug in WebAssembly code generation could result in a crash | 8.8 | 0.0063 |  |
| [CVE-2024-7521](https://patchblox.com/security/data/cve/CVE-2024-7521.md) | High | Mozilla Firefox ESR and 6 others: Improper Handling of Exceptional Conditions | 9.6 | 0.0062 |  |
| [CVE-2024-9402](https://patchblox.com/security/data/cve/CVE-2024-9402.md) | High | Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer | 9.8 | 0.0062 |  |
| [CVE-2024-7527](https://patchblox.com/security/data/cve/CVE-2024-7527.md) | High | Mozilla Firefox ESR and 6 others: Use After Free | 9.6 | 0.0061 |  |
| [CVE-2024-7525](https://patchblox.com/security/data/cve/CVE-2024-7525.md) | High | Mozilla Firefox ESR and 6 others: Improper Access Control | 9.6 | 0.0060 |  |
| [CVE-2024-8382](https://patchblox.com/security/data/cve/CVE-2024-8382.md) | High | Mozilla Firefox ESR and 6 others: Improper Check for Dropped Privileges | 8.8 | 0.0060 |  |
| [CVE-2025-1016](https://patchblox.com/security/data/cve/CVE-2025-1016.md) | High | Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 | 9.8 | 0.0059 |  |
| [CVE-2024-9396](https://patchblox.com/security/data/cve/CVE-2024-9396.md) | High | Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer | 8.8 | 0.0059 |  |
| [CVE-2024-7526](https://patchblox.com/security/data/cve/CVE-2024-7526.md) | High | Mozilla Firefox ESR and 6 others: Use of Uninitialized Resource | 9.6 | 0.0058 |  |
| [CVE-2024-8385](https://patchblox.com/security/data/cve/CVE-2024-8385.md) | High | Mozilla Firefox ESR and 7 others: Access of Resource Using Incompatible Type ('Type Confusion') | 9.8 | 0.0058 |  |
| [CVE-2025-1017](https://patchblox.com/security/data/cve/CVE-2025-1017.md) | High | Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 | 9.8 | 0.0058 |  |
| [CVE-2025-1937](https://patchblox.com/security/data/cve/CVE-2025-1937.md) | High | Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8 | 8.8 | 0.0056 |  |
| [CVE-2025-1020](https://patchblox.com/security/data/cve/CVE-2025-1020.md) | High | Memory safety bugs fixed in Firefox 135 and Thunderbird 135 | 9.8 | 0.0054 |  |
| [CVE-2025-1931](https://patchblox.com/security/data/cve/CVE-2025-1931.md) | High | Use-after-free in WebTransportChild | 8.8 | 0.0054 |  |
| [CVE-2024-9392](https://patchblox.com/security/data/cve/CVE-2024-9392.md) | High | Mozilla Firefox ESR and 7 others: Origin Validation Error | 9.8 | 0.0054 |  |
| [CVE-2024-11702](https://patchblox.com/security/data/cve/CVE-2024-11702.md) | High | Mozilla Firefox ESR and 8 others: Inappropriate Encoding for Output Context | 7.5 | 0.0053 |  |
| [CVE-2024-7529](https://patchblox.com/security/data/cve/CVE-2024-7529.md) | High | Mozilla Firefox ESR and 6 others: User Interface (UI) Misrepresentation of Critical Information | 9.6 | 0.0053 |  |
| [CVE-2024-9394](https://patchblox.com/security/data/cve/CVE-2024-9394.md) | High | Mozilla Firefox ESR and 7 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 7.6 | 0.0052 |  |
| [CVE-2024-11694](https://patchblox.com/security/data/cve/CVE-2024-11694.md) | High | Mozilla Firefox ESR and 8 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 8.8 | 0.0052 |  |
| [CVE-2024-7528](https://patchblox.com/security/data/cve/CVE-2024-7528.md) | High | Mozilla Firefox ESR and 6 others: Use After Free | 9.6 | 0.0052 |  |
| [CVE-2025-3030](https://patchblox.com/security/data/cve/CVE-2025-3030.md) | High | Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9 | 8.8 | 0.0051 |  |
| [CVE-2024-11700](https://patchblox.com/security/data/cve/CVE-2024-11700.md) | High | Mozilla Firefox ESR and 8 others: Improper Restriction of Rendered UI Layers or Frames | 8.1 | 0.0051 |  |
| [CVE-2024-7518](https://patchblox.com/security/data/cve/CVE-2024-7518.md) | High | Mozilla Firefox ESR and 6 others: Improper Restriction of Rendered UI Layers or Frames | 9.6 | 0.0051 |  |
| [CVE-2025-4091](https://patchblox.com/security/data/cve/CVE-2025-4091.md) | High | Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 | 8.8 | 0.0051 |  |
| [CVE-2024-9400](https://patchblox.com/security/data/cve/CVE-2024-9400.md) | High | Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer | 8.8 | 0.0051 |  |
| [CVE-2025-5268](https://patchblox.com/security/data/cve/CVE-2025-5268.md) | High | Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11 | 8.8 | 0.0051 |  |
| [CVE-2024-11692](https://patchblox.com/security/data/cve/CVE-2024-11692.md) | High | Mozilla Firefox ESR and 8 others: Authentication Bypass by Spoofing | 8.8 | 0.0049 |  |
| [CVE-2024-7524](https://patchblox.com/security/data/cve/CVE-2024-7524.md) | High | Mozilla Firefox ESR and 4 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 9.6 | 0.0049 |  |
| [CVE-2025-1942](https://patchblox.com/security/data/cve/CVE-2025-1942.md) | High | Disclosure of uninitialized memory when .toUpperCase() causes string to get longer | 9.8 | 0.0048 |  |
| [CVE-2025-3034](https://patchblox.com/security/data/cve/CVE-2025-3034.md) | High | Memory safety bugs fixed in Firefox 137 and Thunderbird 137 | 8.1 | 0.0048 |  |
| [CVE-2024-11695](https://patchblox.com/security/data/cve/CVE-2024-11695.md) | High | Mozilla Firefox ESR and 8 others: Improper Restriction of Rendered UI Layers or Frames | 8.8 | 0.0046 |  |
| [CVE-2025-1010](https://patchblox.com/security/data/cve/CVE-2025-1010.md) | High | Use-after-free in Custom Highlight | 8.8 | 0.0046 |  |
| [CVE-2025-4083](https://patchblox.com/security/data/cve/CVE-2025-4083.md) | High | Process isolation bypass using "javascript:" URI links in cross-origin frames | 9.1 | 0.0046 |  |
| [CVE-2025-6435](https://patchblox.com/security/data/cve/CVE-2025-6435.md) | High | Save as in Devtools could download files without sanitizing the extension | 8.1 | 0.0046 |  |
| [CVE-2025-1934](https://patchblox.com/security/data/cve/CVE-2025-1934.md) | High | Unexpected GC during RegExp bailout processing | 8.8 | 0.0045 |  |
| [CVE-2025-1012](https://patchblox.com/security/data/cve/CVE-2025-1012.md) | High | Use-after-free during concurrent delazification | 8.8 | 0.0045 |  |
| [CVE-2025-1936](https://patchblox.com/security/data/cve/CVE-2025-1936.md) | High | Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents | 8.8 | 0.0045 |  |
| [CVE-2024-9403](https://patchblox.com/security/data/cve/CVE-2024-9403.md) | High | Mozilla Firefox ESR and 7 others: Improper Restriction of Operations within the Bounds of a Memory Buffer | 7.5 | 0.0045 |  |
| [CVE-2025-1943](https://patchblox.com/security/data/cve/CVE-2025-1943.md) | High | Memory safety bugs fixed in Firefox 136 and Thunderbird 136 | 8.2 | 0.0044 |  |
| [CVE-2024-8900](https://patchblox.com/security/data/cve/CVE-2024-8900.md) | High | Mozilla Firefox ESR and 7 others: Incorrect Permission Assignment for Critical Resource | 7.5 | 0.0043 |  |
| [CVE-2025-1932](https://patchblox.com/security/data/cve/CVE-2025-1932.md) | High | Inconsistent comparator in XSLT sorting led to out-of-bounds access | 8.8 | 0.0042 |  |
| [CVE-2025-3032](https://patchblox.com/security/data/cve/CVE-2025-3032.md) | High | Leaking file descriptors from the fork server | 7.4 | 0.0041 |  |
| [CVE-2025-1930](https://patchblox.com/security/data/cve/CVE-2025-1930.md) | High | AudioIPC StreamData could trigger a use-after-free in the Browser process | 8.8 | 0.0040 |  |
| [CVE-2024-9393](https://patchblox.com/security/data/cve/CVE-2024-9393.md) | High | Mozilla Firefox ESR and 7 others: Origin Validation Error | 7.6 | 0.0040 |  |
| [CVE-2025-1014](https://patchblox.com/security/data/cve/CVE-2025-1014.md) | High | Certificate length was not properly checked | 8.8 | 0.0039 |  |
| [CVE-2024-7530](https://patchblox.com/security/data/cve/CVE-2024-7530.md) | High | Mozilla Firefox ESR and 4 others: Use After Free | 8.8 | 0.0038 |  |
| [CVE-2025-6427](https://patchblox.com/security/data/cve/CVE-2025-6427.md) | High | connect-src Content Security Policy restriction could be bypassed | 9.1 | 0.0037 |  |
| [CVE-2024-11696](https://patchblox.com/security/data/cve/CVE-2024-11696.md) | High | Mozilla Firefox ESR and 8 others: Improper Verification of Cryptographic Signature | 8.8 | 0.0036 |  |
| [CVE-2025-3029](https://patchblox.com/security/data/cve/CVE-2025-3029.md) | High | URL Bar Spoofing via non-BMP Unicode characters | 8.8 | 0.0036 |  |
| [CVE-2025-6429](https://patchblox.com/security/data/cve/CVE-2025-6429.md) | High | Incorrect parsing of URLs could have allowed embedding of youtube.com | 7.5 | 0.0035 |  |
| [CVE-2025-6432](https://patchblox.com/security/data/cve/CVE-2025-6432.md) | High | DNS Requests leaked outside of a configured SOCKS proxy | 8.6 | 0.0035 |  |
| [CVE-2025-1935](https://patchblox.com/security/data/cve/CVE-2025-1935.md) | High | Clickjacking the registerProtocolHandler info-bar | 8.8 | 0.0034 |  |
| [CVE-2025-5272](https://patchblox.com/security/data/cve/CVE-2025-5272.md) | High | Memory safety bugs fixed in Firefox 139 and Thunderbird 139 | 7.3 | 0.0034 |  |
| [CVE-2025-5266](https://patchblox.com/security/data/cve/CVE-2025-5266.md) | High | Script element events leaked cross-origin resource status | 8.8 | 0.0034 |  |
| [CVE-2025-1938](https://patchblox.com/security/data/cve/CVE-2025-1938.md) | High | Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 | 8.8 | 0.0034 |  |
| [CVE-2025-4087](https://patchblox.com/security/data/cve/CVE-2025-4087.md) | High | Unsafe attribute access during XPath parsing | 8.8 | 0.0032 |  |
| [CVE-2025-1933](https://patchblox.com/security/data/cve/CVE-2025-1933.md) | High | JIT corruption of WASM i32 return values on 64-bit CPUs | 8.8 | 0.0032 |  |
| [CVE-2025-1013](https://patchblox.com/security/data/cve/CVE-2025-1013.md) | High | Potential opening of private browsing tabs in normal browsing windows | 8.8 | 0.0032 |  |
| [CVE-2025-4085](https://patchblox.com/security/data/cve/CVE-2025-4085.md) | High | Potential information leakage and privilege escalation in UITour actor | 7.1 | 0.0031 |  |
| [CVE-2025-6425](https://patchblox.com/security/data/cve/CVE-2025-6425.md) | High | The WebCompat WebExtension shipped with Firefox exposed a persistent UUID | 7.5 | 0.0031 |  |
| [CVE-2025-5264](https://patchblox.com/security/data/cve/CVE-2025-5264.md) | High | Potential local code execution in “Copy as cURL” command | 8.8 | 0.0030 |  |
| [CVE-2025-6433](https://patchblox.com/security/data/cve/CVE-2025-6433.md) | High | WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate | 9.8 | 0.0030 |  |
| [CVE-2025-5270](https://patchblox.com/security/data/cve/CVE-2025-5270.md) | High | SNI was sometimes unencrypted | 7.5 | 0.0029 |  |
| [CVE-2025-5267](https://patchblox.com/security/data/cve/CVE-2025-5267.md) | High | Clickjacking vulnerability could have led to leaking saved payment card details | 8.8 | 0.0028 |  |
| [CVE-2024-7523](https://patchblox.com/security/data/cve/CVE-2024-7523.md) | High | Mozilla Firefox ESR and 4 others: Improper Restriction of Rendered UI Layers or Frames | 8.1 | 0.0028 |  |
| [CVE-2025-6430](https://patchblox.com/security/data/cve/CVE-2025-6430.md) | High | Content-Disposition header ignored when a file is included in an embed or object tag | 7.5 | 0.0027 |  |
| [CVE-2025-5263](https://patchblox.com/security/data/cve/CVE-2025-5263.md) | High | Error handling for script execution was incorrectly isolated from web content | 8.8 | 0.0026 |  |
| [CVE-2025-0243](https://patchblox.com/security/data/cve/CVE-2025-0243.md) | High | Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 | 7.5 | 0.0025 |  |
| [CVE-2025-1940](https://patchblox.com/security/data/cve/CVE-2025-1940.md) | High | Android Intent confirmation prompt tapjacking using Select options | 7.1 | 0.0025 |  |
| [CVE-2025-3033](https://patchblox.com/security/data/cve/CVE-2025-3033.md) | High | Opening local .url files could lead to another file being opened | 7.7 | 0.0017 |  |
| [CVE-2025-0244](https://patchblox.com/security/data/cve/CVE-2025-0244.md) | Routine | Address bar spoofing using an invalid protocol scheme on Firefox for Android | 5.3 | 0.0745 |  |
| [CVE-2025-0238](https://patchblox.com/security/data/cve/CVE-2025-0238.md) | Routine | Use-after-free when breaking lines in text | 6.5 | 0.0079 |  |
| [CVE-2024-10463](https://patchblox.com/security/data/cve/CVE-2024-10463.md) | Routine | Mozilla Firefox ESR and 7 others: Observable Discrepancy | 6.5 | 0.0073 |  |
| [CVE-2025-0240](https://patchblox.com/security/data/cve/CVE-2025-0240.md) | Routine | Compartment mismatch when parsing JavaScript JSON module | 6.5 | 0.0067 |  |
| [CVE-2024-10464](https://patchblox.com/security/data/cve/CVE-2024-10464.md) | Routine | Mozilla Firefox ESR and 7 others: Out-of-bounds Read | 6.5 | 0.0064 |  |
| [CVE-2024-10461](https://patchblox.com/security/data/cve/CVE-2024-10461.md) | Routine | Mozilla Firefox ESR and 7 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 6.1 | 0.0060 |  |
| [CVE-2025-0237](https://patchblox.com/security/data/cve/CVE-2025-0237.md) | Routine | WebChannel APIs susceptible to confused deputy attack | 6.8 | 0.0060 |  |
| [CVE-2024-9398](https://patchblox.com/security/data/cve/CVE-2024-9398.md) | Routine | Mozilla Firefox ESR and 7 others: Observable Discrepancy | 5.3 | 0.0057 |  |
| [CVE-2024-10462](https://patchblox.com/security/data/cve/CVE-2024-10462.md) | Routine | Mozilla Firefox ESR and 7 others: Authentication Bypass by Spoofing | 6.5 | 0.0057 |  |
| [CVE-2024-10465](https://patchblox.com/security/data/cve/CVE-2024-10465.md) | Routine | Mozilla Firefox ESR and 7 others: Authentication Bypass by Spoofing | 6.5 | 0.0057 |  |
| [CVE-2024-11706](https://patchblox.com/security/data/cve/CVE-2024-11706.md) | Routine | Mozilla Firefox ESR and 8 others: NULL Pointer Dereference | 6.5 | 0.0050 |  |
| [CVE-2025-4082](https://patchblox.com/security/data/cve/CVE-2025-4082.md) | Routine | WebGL shader attribute memory corruption in Thunderbird for macOS | 5.9 | 0.0046 |  |
| [CVE-2025-1414](https://patchblox.com/security/data/cve/CVE-2025-1414.md) | Routine | Memory safety bugs fixed in Firefox 135.0.1 | 6.5 | 0.0045 |  |
| [CVE-2024-7531](https://patchblox.com/security/data/cve/CVE-2024-7531.md) | Routine | Mozilla Firefox ESR and 4 others: Time-of-check Time-of-use (TOCTOU) Race Condition | 6.5 | 0.0044 |  |
| [CVE-2024-11701](https://patchblox.com/security/data/cve/CVE-2024-11701.md) | Routine | Mozilla Firefox ESR and 8 others: Authentication Bypass by Spoofing | 4.3 | 0.0042 |  |
| [CVE-2024-10468](https://patchblox.com/security/data/cve/CVE-2024-10468.md) | Routine | Mozilla Firefox ESR and 7 others: Allocation of Resources Without Limits or Throttling | 5.3 | 0.0042 |  |
| [CVE-2025-1018](https://patchblox.com/security/data/cve/CVE-2025-1018.md) | Routine | Fullscreen notification is not displayed when fullscreen is re-requested | 5.3 | 0.0041 |  |
| [CVE-2024-8386](https://patchblox.com/security/data/cve/CVE-2024-8386.md) | Routine | Mozilla Firefox ESR and 7 others: Authentication Bypass by Spoofing | 6.1 | 0.0039 |  |
| [CVE-2024-9397](https://patchblox.com/security/data/cve/CVE-2024-9397.md) | Routine | Mozilla Firefox ESR and 7 others: Improper Restriction of Rendered UI Layers or Frames | 6.1 | 0.0037 |  |
| [CVE-2025-1019](https://patchblox.com/security/data/cve/CVE-2025-1019.md) | Routine | Fullscreen notification not properly displayed | 4.3 | 0.0036 |  |
| [CVE-2024-11708](https://patchblox.com/security/data/cve/CVE-2024-11708.md) | Routine | Mozilla Firefox ESR and 8 others: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | 6.5 | 0.0035 |  |
| [CVE-2024-10460](https://patchblox.com/security/data/cve/CVE-2024-10460.md) | Routine | Mozilla Firefox ESR and 7 others: Origin Validation Error | 5.3 | 0.0034 |  |
| [CVE-2025-4090](https://patchblox.com/security/data/cve/CVE-2025-4090.md) | Routine | Leaked library paths in Thunderbird for Android | 5.3 | 0.0034 |  |
| [CVE-2025-3608](https://patchblox.com/security/data/cve/CVE-2025-3608.md) | Routine | Race condition in nsHttpTransaction could lead to memory corruption | 6.5 | 0.0033 |  |
| [CVE-2024-9395](https://patchblox.com/security/data/cve/CVE-2024-9395.md) | Routine | Mozilla Firefox ESR and 4 others: A specially crafted filename containing a large number of spaces could obscure the file's extension when… | 5.3 | 0.0033 |  |
| [CVE-2025-4092](https://patchblox.com/security/data/cve/CVE-2025-4092.md) | Routine | Memory safety bugs fixed in Firefox 138 and Thunderbird 138 | 6.5 | 0.0031 |  |
| [CVE-2025-5271](https://patchblox.com/security/data/cve/CVE-2025-5271.md) | Routine | Devtools' preview ignored CSP headers | 6.5 | 0.0031 |  |
| [CVE-2025-3031](https://patchblox.com/security/data/cve/CVE-2025-3031.md) | Routine | JIT optimization bug with different stack slot sizes | 6.5 | 0.0031 |  |
| [CVE-2025-3035](https://patchblox.com/security/data/cve/CVE-2025-3035.md) | Routine | Tab title disclosure across pages when using AI chatbot | 5.3 | 0.0030 |  |
| [CVE-2025-4086](https://patchblox.com/security/data/cve/CVE-2025-4086.md) | Routine | Specially crafted filename could be used to obscure download type | 6.5 | 0.0030 |  |
| [CVE-2025-0245](https://patchblox.com/security/data/cve/CVE-2025-0245.md) | Routine | Lock screen setting bypass in Firefox Focus for Android | 3.3 | 0.0029 |  |
| [CVE-2025-6434](https://patchblox.com/security/data/cve/CVE-2025-6434.md) | Routine | HTTPS-Only exception screen lacked anti-clickjacking delay | 4.3 | 0.0028 |  |
| [CVE-2024-9391](https://patchblox.com/security/data/cve/CVE-2024-9391.md) | Routine | Mozilla Firefox ESR and 4 others: Authentication Bypass by Spoofing | 6.5 | 0.0028 |  |
| [CVE-2024-9936](https://patchblox.com/security/data/cve/CVE-2024-9936.md) | Routine | Mozilla Firefox ESR and 4 others: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | 6.5 | 0.0027 |  |
| [CVE-2025-0239](https://patchblox.com/security/data/cve/CVE-2025-0239.md) | Routine | Alt-Svc ALPN validation failure when redirected | 5.4 | 0.0023 |  |
| [CVE-2024-11703](https://patchblox.com/security/data/cve/CVE-2024-11703.md) | Routine | Mozilla Firefox ESR and 5 others: Insufficiently Protected Credentials | 5.7 | 0.0022 |  |
| [CVE-2025-5265](https://patchblox.com/security/data/cve/CVE-2025-5265.md) | Routine | Potential local code execution in “Copy as cURL” command | 4.8 | 0.0021 |  |
| [CVE-2025-4089](https://patchblox.com/security/data/cve/CVE-2025-4089.md) | Routine | Potential local code execution in "copy as cURL" command | 5.1 | 0.0019 |  |
| [CVE-2025-1939](https://patchblox.com/security/data/cve/CVE-2025-1939.md) | Routine | Tapjacking in Android Custom Tabs using transition animations | 3.9 | 0.0019 |  |
| [CVE-2025-4088](https://patchblox.com/security/data/cve/CVE-2025-4088.md) | Routine | Cross-site request forgery via storage access API redirects | 6.5 | 0.0018 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.