High 2 exploited CVEs DLA-2170-1 5 CVEs

firefox-esr - security update

Published Apr 8, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	firefox-esr	68.7.0esr-1~deb8u1

Vulnerabilities 5

High 8.1

CVE-2020-6819 Exploited

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
KEV Nov 3, 2021
High 8.1

CVE-2020-6820 Exploited

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-6821

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
Unscored —

CVE-2020-6822

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
Unscored —

CVE-2020-6825

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefo…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020