Mozilla Firefox ESR (kn) 128.3.0
Mozilla Firefox ESR (kn) 128.3.0, released October 1, 2024, fixes 178 CVEs in Mozilla Firefox ESR (kn). 2 of them are being exploited (CVE-2023-4863); 2 on CISA KEV. Patch Radar priority: Patch now. The latest Mozilla Firefox ESR (kn) is 153.7.0, which also fixes every one of these CVEs.
Superseded. The latest Mozilla Firefox ESR (kn) is 153.7.0, which also fixes every CVE on this page. Install that instead.
Priority of the 178 CVEs
Applies to
| Product | Version |
|---|---|
| Mozilla Firefox ESR (kn) | 128.3.0 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2023-4863 | Chromium: CVE-2023-4863 Heap buffer overflow in WebP | 9.6 | 0.9998 | KEVDisclosedExploited |
| Patch now | CVE-2023-5217 | Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx | 8.8 | 0.4901 | KEVDisclosedExploited |
| Urgent | CVE-2024-29944 | Mozilla Firefox ESR and 3 others: Inclusion of Web Functionality from an Untrusted Source | 8.8 | 0.0470 | None reported |
| Urgent | CVE-2023-5176 | Mozilla Firefox ESR and 5 others: Out-of-bounds Write | 9.8 | 0.0139 | None reported |
| Urgent | CVE-2023-5174 | Mozilla Firefox ESR and 5 others: Use After Free | 9.8 | 0.0120 | None reported |
| Urgent | CVE-2023-5168 | Mozilla Firefox ESR and 5 others: Out-of-bounds Write | 9.8 | 0.0112 | None reported |
| Urgent | CVE-2024-6602 | Memory corruption in NSS | 9.8 | 0.0099 | None reported |
| Urgent | CVE-2023-4056 | Mozilla Firefox ESR and 3 others: Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0,… | 9.8 | 0.0095 | None reported |
| Urgent | CVE-2023-4057 | Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. | 9.8 | 0.0089 | None reported |
| Urgent | CVE-2024-3863 | Mozilla Firefox ESR and 5 others: Unrestricted Upload of File with Dangerous Type | 9.8 | 0.0081 | None reported |
| Urgent | CVE-2023-4058 | Mozilla Firefox ESR and 3 others: Memory safety bugs present in Firefox 115. | 9.8 | 0.0079 | None reported |
| High | CVE-2024-4367 | Mozilla Firefox ESR and 6 others: Improper Check for Unusual or Exceptional Conditions | 8.8 | 0.7066 | None reported |
| High | CVE-2024-29943 | Mozilla Firefox ESR and 3 others: Out-of-bounds Read | 9.8 | 0.2294 | None reported |
| High | CVE-2023-6856 | Mozilla Firefox ESR and 5 others: The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems… | 8.8 | 0.2063 | None reported |
| High | CVE-2023-4050 | Mozilla Firefox ESR and 3 others: In some cases, an untrusted input stream was copied to a stack buffer without checking its size. | 7.5 | 0.1258 | None reported |
| High | CVE-2024-0741 | Mozilla Firefox ESR and 5 others: Out-of-bounds Write | 7.5 | 0.0216 | None reported |
| High | CVE-2023-6858 | Mozilla Firefox ESR and 5 others: Out-of-bounds Write | 8.8 | 0.0154 | None reported |
| High | CVE-2023-5730 | Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. | 9.8 | 0.0154 | None reported |
| High | CVE-2023-5724 | Mozilla Firefox ESR and 5 others: Uncontrolled Resource Consumption | 7.5 | 0.0152 | None reported |
| High | CVE-2023-6861 | Mozilla Firefox ESR and 5 others: The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless… | 8.8 | 0.0141 | None reported |
| High | CVE-2023-5728 | Mozilla Firefox ESR and 5 others: Use After Free | 7.5 | 0.0132 | None reported |
| High | CVE-2024-0743 | Mozilla Firefox ESR and 5 others: Unchecked Return Value | 7.5 | 0.0129 | None reported |
| High | CVE-2023-6864 | Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. | 8.8 | 0.0119 | None reported |
| High | CVE-2023-5731 | Mozilla Firefox ESR and 3 others: Memory safety bugs present in Firefox 118. | 9.8 | 0.0115 | None reported |
| High | CVE-2023-4046 | Mozilla Firefox ESR and 3 others: Allocation of Resources Without Limits or Throttling | 7.5 | 0.0113 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.