High 1 exploited CVE DSA-4600-1 5 CVEs

firefox-esr - security update

Published Jan 9, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 10	firefox-esr	68.4.1esr-1~deb10u1
Debian · 9	firefox-esr	68.4.1esr-1~deb9u1

Vulnerabilities 5

High 8.8

CVE-2019-17026 Exploited Public exploit EPSS 46%

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Mar 2, 2020
KEV Nov 3, 2021
Unscored —

CVE-2019-17016

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @…

Mozilla Firefox Firefox ESR thunderbird Browsers Debian Ubuntu Alpine

Jan 8, 2020
Unscored —

CVE-2019-17017

Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presu…

Mozilla Firefox Firefox ESR thunderbird Browsers Debian Ubuntu Alpine

Jan 8, 2020
Unscored —

CVE-2019-17022

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and…

Mozilla Firefox Firefox ESR thunderbird Browsers Debian Ubuntu Alpine

Jan 8, 2020
Unscored —

CVE-2019-17024

Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed ev…

Mozilla Firefox Firefox ESR thunderbird Browsers Debian Ubuntu Alpine

Jan 8, 2020