Windows apps · Application version · June 25, 2020
Mozilla Firefox ESR (en-US) 78.0esr
Mozilla Firefox ESR (en-US) 78.0esr, released June 25, 2020, fixes 112 CVEs in Mozilla Firefox ESR (en-US). 3 of them are being exploited (CVE-2019-17026); 3 on CISA KEV. Patch Radar priority: Patch now. The latest Mozilla Firefox ESR (en-US) is 153.7.0, which also fixes every one of these CVEs.
Patch now3 on CISA KEV
Superseded. The latest Mozilla Firefox ESR (en-US) is 153.7.0, which also fixes every CVE on this page. Install that instead.
CVEs closed
112
40 rated Critical
Exploited
3
CVE-2019-17026
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.4631
98th percentile
Priority of the 112 CVEs
Patch now 3
Urgent 37
High 42
Routine 30
Applies to
| Product | Version |
|---|---|
| Mozilla Firefox ESR (en-US) | 78.0esr |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2019-17026 | Mozilla Firefox And Thunderbird Type Confusion Vulnerability | 8.8 | 0.4631 | KEVExploited |
| Patch now | CVE-2020-6820 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 8.8 | 0.0706 | KEVExploited |
| Patch now | CVE-2020-6819 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 8.8 | 0.0304 | KEVExploited |
| Urgent | CVE-2020-6831 | Firefox ESR: A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. | 9.8 | 0.0580 | None reported |
| Urgent | CVE-2020-12388 | Firefox ESR: The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox… | 10.0 | 0.0352 | None reported |
| Urgent | CVE-2020-12395 | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox… | 9.8 | 0.0260 | None reported |
| Urgent | CVE-2019-17017 | Firefox ESR: Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in… | 8.8 | 0.0249 | None reported |
| Urgent | CVE-2019-17024 | Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. | 8.8 | 0.0246 | None reported |
| Urgent | CVE-2019-11752 | Firefox ESR: It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. | 8.8 | 0.0218 | None reported |
| Urgent | CVE-2019-17016 | Firefox ESR: When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly… | 6.1 | 0.0199 | None reported |
| Urgent | CVE-2019-17022 | Firefox ESR: When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not… | 6.1 | 0.0199 | None reported |
| Urgent | CVE-2019-17012 | Firefox ESR: Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. | 8.8 | 0.0197 | None reported |
| Urgent | CVE-2019-17005 | Firefox ESR: The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however… | 8.8 | 0.0191 | None reported |
| Urgent | CVE-2019-17008 | Firefox ESR: When using nested workers, a use-after-free could occur during worker destruction. | 8.8 | 0.0188 | None reported |
| Urgent | CVE-2019-11743 | Firefox ESR: Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification… | 3.7 | 0.0180 | None reported |
| Urgent | CVE-2020-12389 | Firefox ESR: The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox… | 10.0 | 0.0172 | None reported |
| Urgent | CVE-2019-11746 | Firefox ESR: A use-after-free vulnerability can occur while manipulating video elements if the body is freed while… | 8.8 | 0.0171 | None reported |
| Urgent | CVE-2019-11742 | Firefox ESR: A same-origin policy violation occurs allowing the theft of cross-origin images through a combination… | 6.5 | 0.0169 | None reported |
| Urgent | CVE-2019-11759 | Firefox ESR: An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on… | 8.8 | 0.0165 | None reported |
| Urgent | CVE-2019-11740 | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR… | 9.8 | 0.0164 | None reported |
| Urgent | CVE-2019-17010 | Firefox ESR: Under certain conditions, when checking the Resist Fingerprinting preference during device orientation… | 7.5 | 0.0152 | None reported |
| Urgent | CVE-2019-17011 | Firefox ESR: Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race… | 7.5 | 0.0152 | None reported |
| Urgent | CVE-2019-9812 | Firefox ESR: Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape… | 9.3 | 0.0151 | None reported |
| Urgent | CVE-2019-11764 | Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox… | 8.8 | 0.0147 | None reported |
| Urgent | CVE-2019-11744 | Firefox ESR: Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without… | 6.1 | 0.0145 | None reported |
Showing 1 to 25 of 112
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.