Mozilla Firefox ESR <78.5
productDEA product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
1critical5high15medium0low
updated 2026-10-27
01
vulnerabilities (21)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2020-15999US | critical9.6OT critical | KEV |
| CVE-2020-16012US | medium4.3 | Exploit |
| CVE-2020-26960US | high8.8 | — |
| CVE-2020-26968US | high8.8 | — |
| CVE-2020-26958US | medium6.1 | — |
| CVE-2020-26966US | medium6.5 | — |
| CVE-2020-26959US | high8.8 | — |
| CVE-2020-26953US | medium4.3 | — |
| CVE-2020-26965US | medium6.5 | — |
| CVE-2020-26956US | medium6.1 | — |
| CVE-2020-26969US | high8.8 | — |
| CVE-2020-26961US | medium6.5 | — |
| CVE-2020-26952US | high8.8 | — |
| CVE-2020-26951US | medium6.1 | — |
| CVE-2020-26964US | medium6.8 | — |
| CVE-2020-26967US | medium6.5 | — |
| CVE-2020-26963US | medium4.3 | — |
| CVE-2020-26955US | medium6.5 | — |
| CVE-2020-26962US | medium6.1 | — |
| CVE-2020-26954US | medium4.3OT elevated | — |
| CVE-2020-26957US | medium6.5 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-787Out-of-bounds Write4 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
- CWE-1021Improper Restriction of Rendered UI Layers or Frames2 CVEs
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
- CWE-416Use After Free2 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
- CWE-190Integer Overflow or Wraparound1 CVEs
- CWE-20Improper Input Validation1 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)21 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan