{"schema_version":1,"title":"Mozilla Firefox ESR vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 295 vulnerabilities in Mozilla Firefox ESR: 0 in the last 7 days and 162 in the last 90 days, 82 of them critical and 12 exploited in the wild. The most recent, CVE-2026-92079, was published on 15 September 2026.","url":"https://junglewise.ai/threats/technologies/firefox-esr","json_url":"https://junglewise.ai/threats/technologies/firefox-esr.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/firefox-esr","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":105,"all_time":295,"critical":82,"exploited":12,"last_7_days":0,"last_30_days":83,"last_90_days":162,"last_365_days":281},"latest":[{"cve":"CVE-2026-92079","cvss":9.1,"epss":0.005,"slug":"cve-2026-92079-mozilla-firefox-mitigation-bypass-in-widget-win32","title":"Mozilla Firefox mitigation bypass in Widget: Win32","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:03.56+00:00","url":"https://junglewise.ai/threats/cve-2026-92079-mozilla-firefox-mitigation-bypass-in-widget-win32"},{"cve":"CVE-2026-92078","cvss":6.5,"epss":0.0042,"slug":"cve-2026-92078-mozilla-firefox-denial-of-service-in-security-component","title":"Mozilla Firefox denial-of-service in Security component","severity":"medium","exploited":false,"published_at":"2026-09-15T13:17:03.44+00:00","url":"https://junglewise.ai/threats/cve-2026-92078-mozilla-firefox-denial-of-service-in-security-component"},{"cve":"CVE-2026-92077","cvss":6.5,"epss":0.0042,"slug":"cve-2026-92077-mozilla-firefox-denial-of-service-in-svg-component","title":"Mozilla Firefox denial-of-service in SVG component","severity":"medium","exploited":false,"published_at":"2026-09-15T13:17:03.323+00:00","url":"https://junglewise.ai/threats/cve-2026-92077-mozilla-firefox-denial-of-service-in-svg-component"},{"cve":"CVE-2026-92076","cvss":8.8,"epss":0.0016,"slug":"cve-2026-92076-mozilla-firefox-incorrect-boundary-conditions-in-networking","title":"Mozilla Firefox incorrect boundary conditions in Networking","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:03.18+00:00","url":"https://junglewise.ai/threats/cve-2026-92076-mozilla-firefox-incorrect-boundary-conditions-in-networking"},{"cve":"CVE-2026-92075","cvss":9.1,"epss":0.005,"slug":"cve-2026-92075-mozilla-firefox-mitigation-bypass-in-networking-component","title":"Mozilla Firefox mitigation bypass in Networking component","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:03.04+00:00","url":"https://junglewise.ai/threats/cve-2026-92075-mozilla-firefox-mitigation-bypass-in-networking-component"},{"cve":"CVE-2026-92074","cvss":8.8,"epss":0.0017,"slug":"cve-2026-92074-mozilla-firefox-and-thunderbird-popup-blocker-mitigation-bypass","title":"Mozilla Firefox and Thunderbird Popup Blocker mitigation bypass","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:02.877+00:00","url":"https://junglewise.ai/threats/cve-2026-92074-mozilla-firefox-and-thunderbird-popup-blocker-mitigation-bypass"},{"cve":"CVE-2026-92073","cvss":8.8,"epss":0.0044,"slug":"cve-2026-92073-mozilla-firefox-privilege-escalation-in-enterprise-policies","title":"Mozilla Firefox privilege escalation in Enterprise Policies","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:02.153+00:00","url":"https://junglewise.ai/threats/cve-2026-92073-mozilla-firefox-privilege-escalation-in-enterprise-policies"},{"cve":"CVE-2026-92072","cvss":8,"epss":0.0043,"slug":"cve-2026-92072-mozilla-firefox-incorrect-boundary-conditions-in-safe-browsing","title":"Mozilla Firefox incorrect boundary conditions in Safe Browsing component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:02.003+00:00","url":"https://junglewise.ai/threats/cve-2026-92072-mozilla-firefox-incorrect-boundary-conditions-in-safe-browsing"},{"cve":"CVE-2026-92071","cvss":9.6,"epss":0.0048,"slug":"cve-2026-92071-mozilla-firefox-sandbox-escape-in-widget-win32-component","title":"Mozilla Firefox sandbox escape in Widget: Win32 component","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:01.86+00:00","url":"https://junglewise.ai/threats/cve-2026-92071-mozilla-firefox-sandbox-escape-in-widget-win32-component"},{"cve":"CVE-2026-92070","cvss":4.3,"epss":0.0034,"slug":"cve-2026-92070-mozilla-firefox-information-disclosure-in-networking-component","title":"Mozilla Firefox information disclosure in Networking component","severity":"medium","exploited":false,"published_at":"2026-09-15T13:17:01.747+00:00","url":"https://junglewise.ai/threats/cve-2026-92070-mozilla-firefox-information-disclosure-in-networking-component"},{"cve":"CVE-2026-92069","cvss":5.4,"epss":0.0034,"slug":"cve-2026-92069-mozilla-firefox-spoofing-issue-in-dom-navigation-component","title":"Mozilla Firefox spoofing issue in DOM Navigation component","severity":"medium","exploited":false,"published_at":"2026-09-15T13:17:01.62+00:00","url":"https://junglewise.ai/threats/cve-2026-92069-mozilla-firefox-spoofing-issue-in-dom-navigation-component"},{"cve":"CVE-2026-92068","cvss":5.4,"epss":0.0017,"slug":"cve-2026-92068-mozilla-firefox-site-isolation-issue-in-reader-mode","title":"Mozilla Firefox site isolation issue in Reader Mode","severity":"medium","exploited":false,"published_at":"2026-09-15T13:17:01.513+00:00","url":"https://junglewise.ai/threats/cve-2026-92068-mozilla-firefox-site-isolation-issue-in-reader-mode"},{"cve":"CVE-2026-92067","cvss":8.8,"epss":0.0047,"slug":"cve-2026-92067-mozilla-firefox-use-after-free-in-widget-gtk-component","title":"Mozilla Firefox use-after-free in Widget: Gtk component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:01.403+00:00","url":"https://junglewise.ai/threats/cve-2026-92067-mozilla-firefox-use-after-free-in-widget-gtk-component"},{"cve":"CVE-2026-92065","cvss":8.8,"epss":0.0016,"slug":"cve-2026-92065-mozilla-firefox-sandbox-escape-in-widget-win32","title":"Mozilla Firefox sandbox escape in Widget: Win32","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:01.147+00:00","url":"https://junglewise.ai/threats/cve-2026-92065-mozilla-firefox-sandbox-escape-in-widget-win32"},{"cve":"CVE-2026-92064","cvss":8.8,"epss":0.0016,"slug":"cve-2026-92064-mozilla-firefox-sandbox-escape-in-widget-win32-component","title":"Mozilla Firefox sandbox escape in Widget: Win32 component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:01.02+00:00","url":"https://junglewise.ai/threats/cve-2026-92064-mozilla-firefox-sandbox-escape-in-widget-win32-component"},{"cve":"CVE-2026-92062","cvss":8.8,"epss":0.0044,"slug":"cve-2026-92062-mozilla-firefox-privilege-escalation-in-session-restore-component","title":"Mozilla Firefox privilege escalation in Session Restore component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:00.777+00:00","url":"https://junglewise.ai/threats/cve-2026-92062-mozilla-firefox-privilege-escalation-in-session-restore-component"},{"cve":"CVE-2026-92060","cvss":8.8,"epss":0.0047,"slug":"cve-2026-92060-mozilla-firefox-use-after-free-in-internationalization-component","title":"Mozilla Firefox use-after-free in Internationalization component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:00.51+00:00","url":"https://junglewise.ai/threats/cve-2026-92060-mozilla-firefox-use-after-free-in-internationalization-component"},{"cve":"CVE-2026-92059","cvss":9.3,"epss":0.0018,"slug":"cve-2026-92059-mozilla-firefox-incorrect-boundary-conditions-in-dom-editor","title":"Mozilla Firefox incorrect boundary conditions in DOM Editor component","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:00.35+00:00","url":"https://junglewise.ai/threats/cve-2026-92059-mozilla-firefox-incorrect-boundary-conditions-in-dom-editor"},{"cve":"CVE-2026-92058","cvss":8.8,"epss":0.0047,"slug":"cve-2026-92058-mozilla-firefox-use-after-free-in-graphics-component","title":"Mozilla Firefox use-after-free in Graphics component","severity":"high","exploited":false,"published_at":"2026-09-15T13:17:00.207+00:00","url":"https://junglewise.ai/threats/cve-2026-92058-mozilla-firefox-use-after-free-in-graphics-component"},{"cve":"CVE-2026-92057","cvss":9.1,"epss":0.005,"slug":"cve-2026-92057-mozilla-firefox-mitigation-bypass-in-enterprise-policies","title":"Mozilla Firefox mitigation bypass in Enterprise Policies component","severity":"critical","exploited":false,"published_at":"2026-09-15T13:17:00.073+00:00","url":"https://junglewise.ai/threats/cve-2026-92057-mozilla-firefox-mitigation-bypass-in-enterprise-policies"},{"cve":"CVE-2026-92056","cvss":8.8,"epss":0.0047,"slug":"cve-2026-92056-mozilla-firefox-use-after-free-in-graphics-text-component","title":"Mozilla Firefox use-after-free in Graphics Text component","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:59.947+00:00","url":"https://junglewise.ai/threats/cve-2026-92056-mozilla-firefox-use-after-free-in-graphics-text-component"},{"cve":"CVE-2026-92055","cvss":8.8,"epss":0.0044,"slug":"cve-2026-92055-mozilla-firefox-privilege-escalation-in-devtools-component","title":"Mozilla Firefox privilege escalation in DevTools component","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:59.37+00:00","url":"https://junglewise.ai/threats/cve-2026-92055-mozilla-firefox-privilege-escalation-in-devtools-component"},{"cve":"CVE-2026-92054","cvss":8.8,"epss":0.0048,"slug":"cve-2026-92054-mozilla-firefox-privilege-escalation-in-memory-component","title":"Mozilla Firefox privilege escalation in Memory component","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:58.8+00:00","url":"https://junglewise.ai/threats/cve-2026-92054-mozilla-firefox-privilege-escalation-in-memory-component"},{"cve":"CVE-2026-92053","cvss":8.8,"epss":0.0048,"slug":"cve-2026-92053-mozilla-firefox-privilege-escalation-in-graphics-canvaswebgl","title":"Mozilla Firefox privilege escalation in Graphics CanvasWebGL","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:57.053+00:00","url":"https://junglewise.ai/threats/cve-2026-92053-mozilla-firefox-privilege-escalation-in-graphics-canvaswebgl"},{"cve":"CVE-2026-92052","cvss":8.8,"epss":0.0048,"slug":"cve-2026-92052-mozilla-firefox-privilege-escalation-in-canvaswebgl-due-to","title":"Mozilla Firefox privilege escalation in CanvasWebGL due to uninitialized memory","severity":"high","exploited":false,"published_at":"2026-09-15T13:16:56.94+00:00","url":"https://junglewise.ai/threats/cve-2026-92052-mozilla-firefox-privilege-escalation-in-canvaswebgl-due-to"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":30},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":12,"exploited":0,"vulnerabilities":49},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":7,"exploited":0,"vulnerabilities":19},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":12,"exploited":0,"vulnerabilities":64},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Mozilla Firefox","slug":"firefox","vulnerabilities":393,"url":"https://junglewise.ai/threats/technologies/firefox"},{"name":"Mozilla Thunderbird","slug":"thunderbird","vulnerabilities":267,"url":"https://junglewise.ai/threats/technologies/thunderbird"},{"name":"Mozilla Thunderbird-Esr","slug":"thunderbird-esr","vulnerabilities":66,"url":"https://junglewise.ai/threats/technologies/thunderbird-esr"},{"name":"Mozilla Firefox for iOS","slug":"firefox-for-ios","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/firefox-for-ios"},{"name":"Mozilla Firefox for Android","slug":"firefox-for-android","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/firefox-for-android"},{"name":"Mozilla Firefox Mobile","slug":"firefox-mobile","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/firefox-mobile"},{"name":"Mozilla Firefox Focus","slug":"firefox-focus-for-android","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/firefox-focus-for-android"}],"technology":{"hub":true,"name":"Mozilla Firefox ESR","slug":"firefox-esr","vendor":{"name":"Mozilla","slug":"mozilla","url":"https://junglewise.ai/threats/vendors/mozilla"},"aliases":[],"category":"web-browser","homepage":"https://www.mozilla.org/firefox/enterprise/","repo_url":"https://hg.mozilla.org/mozilla-esr128/","description":"Firefox ESR is a version of the Firefox web browser designed for organizations and users who require extended support for mass deployments.","url":"https://junglewise.ai/threats/technologies/firefox-esr"},"most_severe":[{"cve":"CVE-2019-11708","cvss":10,"slug":"cve-2019-11708-mozilla-firefox-and-thunderbird-sandbox-escape-vulnerability","title":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11708-mozilla-firefox-and-thunderbird-sandbox-escape-vulnerability"},{"cve":"CVE-2024-9680","cvss":9.8,"slug":"cve-2024-9680-mozilla-firefox-use-after-free-vulnerability","title":"Mozilla Firefox Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-9680-mozilla-firefox-use-after-free-vulnerability"},{"cve":"CVE-2022-26486","cvss":9.6,"slug":"cve-2022-26486-mozilla-firefox-use-after-free-vulnerability","title":"Mozilla Firefox Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26486-mozilla-firefox-use-after-free-vulnerability"},{"cve":"CVE-2015-4495","cvss":8.8,"slug":"cve-2015-4495-mozilla-firefox-security-feature-bypass-vulnerability","title":"Mozilla Firefox Security Feature Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2015-4495-mozilla-firefox-security-feature-bypass-vulnerability"},{"cve":"CVE-2019-11707","cvss":8.8,"slug":"cve-2019-11707-mozilla-firefox-and-thunderbird-type-confusion-vulnerability","title":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-11707-mozilla-firefox-and-thunderbird-type-confusion-vulnerability"},{"cve":"CVE-2013-1690","cvss":8.8,"slug":"cve-2013-1690-mozilla-firefox-and-thunderbird-denial-of-service-vulnerability","title":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-1690-mozilla-firefox-and-thunderbird-denial-of-service-vulnerability"},{"cve":"CVE-2022-26485","cvss":8.8,"slug":"cve-2022-26485-mozilla-firefox-use-after-free-vulnerability","title":"Mozilla Firefox Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-26485-mozilla-firefox-use-after-free-vulnerability"},{"cve":"CVE-2019-17026","cvss":8.8,"slug":"cve-2019-17026-mozilla-firefox-and-thunderbird-type-confusion-vulnerability","title":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-17026-mozilla-firefox-and-thunderbird-type-confusion-vulnerability"},{"cve":"CVE-2020-6819","cvss":8.1,"slug":"cve-2020-6819-mozilla-firefox-and-thunderbird-use-after-free-vulnerability","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-6819-mozilla-firefox-and-thunderbird-use-after-free-vulnerability"},{"cve":"CVE-2020-6820","cvss":8.1,"slug":"cve-2020-6820-mozilla-firefox-and-thunderbird-use-after-free-vulnerability","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-6820-mozilla-firefox-and-thunderbird-use-after-free-vulnerability"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}