Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-firefoxcentos-upgrade-thunderbird | Jul 6, 2016 | Apr 30, 2016 |
| Debian | debian-upgrade-firefox-esrdebian-upgrade-icedovedebian-upgrade-iceweasel | Apr 30, 2016 | Apr 30, 2016 | |
| Freebsd | freebsd-upgrade-package-firefoxfreebsd-upgrade-package-linux-firefoxfreebsd-upgrade-package-seamonkeyfreebsd-upgrade-package-linux-seamonkeyfreebsd-upgrade-package-firefox-esrfreebsd-upgrade-package-libxulfreebsd-upgrade-package-thunderbirdfreebsd-upgrade-package-linux-thunderbird | Dec 10, 2025 | Apr 26, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin | Oct 30, 2017 | Apr 30, 2016 | |
| Mfsa2016 39 | mozilla-firefox-esr-upgrade-38_8mozilla-firefox-esr-upgrade-45_1mozilla-firefox-upgrade-46_0 | Apr 27, 2016 | Apr 26, 2016 | |
| Mozilla Thunderbird | mozilla-thunderbird-upgrade-38_8mozilla-thunderbird-upgrade-45_1 | May 9, 2016 | Apr 30, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-developer-yasm-1-3-0-0-175-3-14-0-2-0oracle-solaris-11-3-upgrade-mail-thunderbird-45-3-0-0-175-3-14-0-4-0oracle-solaris-11-3-upgrade-mail-thunderbird-plugin-thunderbird-lightning-45-3-0-0-175-3-14-0-4-0oracle-solaris-11-3-upgrade-web-browser-firefox-45-4-0-0-175-3-14-0-4-0oracle-solaris-11-3-upgrade-web-data-firefox-bookmarks-45-4-0-0-175-3-14-0-4-0oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | May 29, 2017 | Apr 30, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-firefoxoracle-linux-upgrade-thunderbird | Apr 30, 2016 | Apr 30, 2016 |
| Suse | — | suse-upgrade-libfreebl3suse-upgrade-libfreebl3-32bitsuse-upgrade-libfreebl3-x86suse-upgrade-libsoftokn3suse-upgrade-libsoftokn3-32bitsuse-upgrade-libsoftokn3-x86suse-upgrade-mozilla-nsprsuse-upgrade-mozilla-nspr-32bitsuse-upgrade-mozilla-nspr-develsuse-upgrade-mozilla-nspr-x86suse-upgrade-mozilla-nsssuse-upgrade-mozilla-nss-32bitsuse-upgrade-mozilla-nss-develsuse-upgrade-mozilla-nss-toolssuse-upgrade-mozilla-nss-x86suse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translationssuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-buildsymbolssuse-upgrade-mozillathunderbird-develsuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-other | May 4, 2016 | Apr 30, 2016 |
| Ubuntu | ubuntu-upgrade-firefoxubuntu-upgrade-thunderbird | Apr 30, 2016 | Apr 30, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub