ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Firefox ESR”

196 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 141Exploit / PoC 38Ransomware 4Data breach 4Industry 3Advisory 2AI tools & infra 2Malware 1Tools 1
SeverityAllcritical 167high 8medium 14low 5info 2

Mozilla security advisory (AV26-868)

Canada's Cyber Centre reports Mozilla vulnerabilities fixed in Firefox 155 and Firefox ESR 115.40, 140.15, and 153.2.

Canadian Centre for Cyber Security advisory AV26-868, dated September 1, 2026, notes vulnerabilities in Firefox (versions prior to 155) and Firefox ESR (prior to 115.40, 140.15, and 153.2). The bulletin links to Mozilla's security advisories and urges users and administrators to update. No CVE identifiers or exploitation details are provided.

Canadian Centre for Cyber Security · 15d agoAdvisory

Mozilla security advisory (AV26-924)

Canadian Cyber Centre advisory AV26-924 lists vulnerabilities in Firefox 156 and Firefox ESR 115.41, 140.16, and 153.3, urging users to update.

The Canadian Centre for Cyber Security issued advisory AV26-924 on September 15, 2026, covering vulnerabilities in Firefox versions prior to 156 and Firefox ESR versions prior to 115.41, 140.16, and 153.3. Users and administrators are encouraged to review Mozilla's security advisories and apply updates. No exploitation details are included in the advisory.

Canadian Centre for Cyber Security · 1d agoAdvisory

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?

August 2026 Patch Tuesday forecast urges risk-based triage as AI inflates CVE volume, flags actively exploited SharePoint RCE CVE-2026-50522 and LegacyHive Windows flaw.

July 2026 Patch Tuesday set records with over 600 CVEs, including 405 for Windows 11 and Server 2025, though only two were exploited zero-days and one was publicly disclosed. The author recommends prioritizing known-exploited and internet-facing vulnerabilities, matching patches to high-risk systems, and accelerating ring-based deployment toward Microsoft's suggested three-day turnaround. Notable items include actively exploited SharePoint RCE CVE-2026-50522 enabling machine key theft, the unassigned LegacyHive Windows User Profile Service flaw, and several end-of-servicing dates for Windows and Exchange.

Help Net Security · 22d agoIndustry in the wildCVE-2026-505221