Mozilla Firefox ESR <128.6

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-0242US	—	14.7% (97th)	—	no fix	2025-01-07	—
CVE-2025-0247US	—	10.6% (96th)	—	no fix	2025-01-07	—
CVE-2025-0244US	—	7.39% (94th)	—	no fix	2025-01-07	—
CVE-2025-0238US	—	0.79% (56th)	—	no fix	2025-01-07	—
CVE-2025-0241US	—	0.73% (54th)	—	no fix	2025-01-07	—
CVE-2025-0240US	—	0.67% (52nd)	—	no fix	2025-01-07	—
CVE-2025-0237US	—OT elevated	0.60% (48th)	—	no fix	2025-01-07	—
CVE-2025-0246US	—	0.45% (39th)	—	no fix	2025-01-07	—
CVE-2025-0245US	—OT elevated	0.29% (21st)	—	no fix	2025-01-07	—
CVE-2025-0243US	—	0.25% (16th)	—	no fix	2025-01-07	—
CVE-2025-0239US	—	0.23% (13th)	—	no fix	2025-01-07	—

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-416Use After Free2 CVEs
CWE-451User Interface (UI) Misrepresentation of Critical Information2 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-254CWE-2541 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.