According to its version, the Foxit PDF Editor for Mac application (previously named Foxit PhantomPDF for Mac) installed on the remote macOS host is prior to 2025.3/14.0.2/13.2.2. It is, therefore affected by multiple vulnerabilities:

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the Foxit PDF Reader for Mac application (previously named Foxit Reader for Mac) installed on the remote macOS host is prior to 2025.3. It is, therefore affected by multiple vulnerabilities:

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 10.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2012-06 advisory.

  - Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly     initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially     sensitive information by reading a PNG image that was created through conversion from an ICO image.
    (CVE-2012-0447)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 16.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2012-75 advisory.

  - Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle     navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to     spoof page content via vectors involving absolute positioning and scrolling. (CVE-2012-3984)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird ESR installed on the remote macOS or Mac OS X host is prior to 17.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory.

  - Do not send data XHR HEAD request(CVE-2013-1692) (CVE-2013-1692)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory.

  - CERTDecodeCertPackage reads bytes outside the input buffer(CVE-2013-0791) (CVE-2013-0791)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2011-41 advisory.

  - Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service     (application crash) or possibly execute arbitrary code via an unspecified WebGL test case that triggers a     memory-allocation error and a resulting out-of-bounds write operation. (CVE-2011-3003)

  - Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 7.0 and SeaMonkey before     2.4, does not validate the return value of a GrowAtomTable function call, which allows remote attackers to     cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger     a memory-allocation error and a resulting buffer overflow. (CVE-2011-3002)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 1.5.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2006-57 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=346794CVE-2006-4566 (CVE-2006-4566)

  - https://bugzilla.mozilla.org/showbug.cgi?id=346090CVE-2006-4565 (CVE-2006-4565)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 8.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2011-51 advisory.

  - Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU     memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the     Same Origin Policy and read image data via vectors related to WebGL textures. (CVE-2011-3653)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.0.16. It is, therefore, affected by a vulnerability as referenced in the mfsa2009-68 advisory.

  - Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers     to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser     user. (CVE-2009-3983)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 1.0.8. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-18 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=269095CVE-2006-0749 (CVE-2006-0749)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.6. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-05 advisory.

  - Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly     support the application/octet-stream content type as a protection mechanism against execution of web     script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to     bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document.
    (CVE-2010-0162)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 16.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2012-75 advisory.

  - Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle     navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to     spoof page content via vectors involving absolute positioning and scrolling. (CVE-2012-3984)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 1.5.0.4. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-31 advisory.

  - EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges     via javascript that calls the valueOf method on objects that were created outside of the sandbox.
    (CVE-2006-2787)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 1.5.0.4. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-31 advisory.

  - EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges     via javascript that calls the valueOf method on objects that were created outside of the sandbox.
    (CVE-2006-2787)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.0.15. It is, therefore, affected by a vulnerability as referenced in the mfsa2009-55 advisory.

  - Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to     execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.
    (CVE-2009-3372)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 19.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-22 advisory.

  - out-of-bounds-read in mozilla::image::RasterImage::DrawFrameTo(CVE-2013-0772) (CVE-2013-0772)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.0.18. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-05 advisory.

  - Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly     support the application/octet-stream content type as a protection mechanism against execution of web     script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to     bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document.
    (CVE-2010-0162)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 1.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-18 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=269095CVE-2006-0749 (CVE-2006-0749)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 2.0.0.8. It is, therefore, affected by a vulnerability as referenced in the mfsa2007-33 advisory.

  - Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying     XUL markup language documents, which makes it easier for remote attackers to conduct phishing and spoofing     attacks by setting the hidechrome attribute. (CVE-2007-5334)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird ESR installed on the remote macOS or Mac OS X host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory.

  - CERTDecodeCertPackage reads bytes outside the input buffer(CVE-2013-0791) (CVE-2013-0791)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 8.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2011-51 advisory.

  - Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU     memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the     Same Origin Policy and read image data via vectors related to WebGL textures. (CVE-2011-3653)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.5.4. It is, therefore, affected by a vulnerability as referenced in the mfsa2009-55 advisory.

  - Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to     execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.
    (CVE-2009-3372)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 32.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-69 advisory.

  - Apparent info leak caused by uninitialized memory with malformed GIFs(CVE-2014-1564) (CVE-2014-1564)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 2.0.0.19. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2008-68 advisory.

  - Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19,     Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary     JavaScript with chrome privileges via unknown vectors in which page content can pollute     XPCNativeWrappers. (CVE-2008-5512)

  - Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey     1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site     scripting (XSS) attacks via an XBL binding to an unloaded document. (CVE-2008-5511)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 1.5.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2006-57 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=346794CVE-2006-4566 (CVE-2006-4566)

  - https://bugzilla.mozilla.org/showbug.cgi?id=346090CVE-2006-4565 (CVE-2006-4565)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.0.6. It is, therefore, affected by a vulnerability as referenced in the mfsa2009-02 advisory.

  - Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers     to bypass the Same Origin Policy, and access the properties of an arbitrary window and conduct cross-site     scripting (XSS) attacks, via vectors involving a chrome XBL method and the window.eval function.
    (CVE-2009-0354)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 22.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory.

  - Do not send data XHR HEAD request(CVE-2013-1692) (CVE-2013-1692)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 40.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2015-83 advisory.

  - crash in [@ stagefright::SampleTable::isValid() ] with h264 mp4(CVE-2015-4480) (CVE-2015-4480)

  - MPEG4 saio Chunk Integer Overflow (libstagefright)(CVE-2015-4479) (CVE-2015-4479)

  - Stagefright: heap-buffer-overflow crash [@stagefright::ESDS::parseESDescriptor](CVE-2015-4493)     (CVE-2015-4493)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 1.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-18 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=269095CVE-2006-0749 (CVE-2006-0749)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 1.0.8. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-18 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=269095CVE-2006-0749 (CVE-2006-0749)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.6.9. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory.

  - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and     SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest     objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin     requests. (CVE-2010-2764)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 31.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-69 advisory.

  - Apparent info leak caused by uninitialized memory with malformed GIFs(CVE-2014-1564) (CVE-2014-1564)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory.

  - CERTDecodeCertPackage reads bytes outside the input buffer(CVE-2013-0791) (CVE-2013-0791)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 2.0.0.15. It is, therefore, affected by a vulnerability as referenced in the mfsa2008-24 advisory.

  - Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow     remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI     that points to a fastload file, related to this file's privilege level. (CVE-2008-2802)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 17.0.6. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-42 advisory.

  - Call content level constructor as if from a chrome/privileged page(CVE-2013-1670) (CVE-2013-1670)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 17.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory.

  - Do not send data XHR HEAD request(CVE-2013-1692) (CVE-2013-1692)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 20.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory.

  - CERTDecodeCertPackage reads bytes outside the input buffer(CVE-2013-0791) (CVE-2013-0791)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 2.0.0.12. It is, therefore, affected by a vulnerability as referenced in the mfsa2008-10 advisory.

  - Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the     .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote     attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as     with Single-Signon systems. (CVE-2008-0593)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird ESR installed on the remote macOS or Mac OS X host is prior to 17.0.6. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-42 advisory.

  - Call content level constructor as if from a chrome/privileged page(CVE-2013-1670) (CVE-2013-1670)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 31.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-90 advisory.

  - jemalloc poisoning plus Apple uninitialized variable usage triggers keylogging in /tmp/ on OSX     10.10(CVE-2014-1595) (CVE-2014-1595)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 3.1.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory.

  - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and     SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest     objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin     requests. (CVE-2010-2764)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 36.0.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2015-29 advisory.

  - Pwn2Own asm.js exploit(CVE-2015-0817) (CVE-2015-0817)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 3.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory.

  - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and     SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest     objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin     requests. (CVE-2010-2764)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 21.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-42 advisory.

  - Call content level constructor as if from a chrome/privileged page(CVE-2013-1670) (CVE-2013-1670)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 31.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-69 advisory.

  - Apparent info leak caused by uninitialized memory with malformed GIFs(CVE-2014-1564) (CVE-2014-1564)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.5.12. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory.

  - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and     SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest     objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin     requests. (CVE-2010-2764)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.5.6. It is, therefore, affected by a vulnerability as referenced in the mfsa2009-68 advisory.

  - Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers     to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser     user. (CVE-2009-3983)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 146.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-98 advisory.

  - Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we     presume that with enough effort some of these could have been exploited to run arbitrary code.
    (CVE-2025-14861)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 31.5.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2015-29 advisory.

  - Pwn2Own asm.js exploit(CVE-2015-0817) (CVE-2015-0817)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
279346	Foxit PDF Editor for Mac < 13.2.2 / 14.0.2 / 2025.3 Multiple Vulnerabilities	high
279345	Foxit PDF Reader for Mac < 2025.3 Multiple Vulnerabilities	high
279242	Mozilla Firefox < 10.0	medium
279240	Mozilla Firefox < 16.0	medium
279239	Mozilla Thunderbird ESR < 17.0.7	high
279237	Mozilla Firefox ESR < 17.0.5	high
279234	Mozilla Firefox < 7.0	critical
279233	Mozilla Firefox < 1.5.0.7	high
279228	Mozilla Firefox < 8.0	high
279227	Mozilla Firefox < 3.0.16	critical
279225	Mozilla Firefox < 1.0.8	high
279219	Mozilla Firefox < 3.6	medium
279215	Mozilla Thunderbird < 16.0	medium
279214	Mozilla Thunderbird < 1.5.0.4	critical
279213	Mozilla Firefox < 1.5.0.4	critical
279212	Mozilla Firefox < 3.0.15	critical
279210	Mozilla Firefox < 19.0	high
279209	Mozilla Firefox < 3.0.18	medium
279208	Mozilla Thunderbird < 1.5	high
279206	Mozilla Firefox < 2.0.0.8	medium
279205	Mozilla Thunderbird ESR < 17.0.5	high
279204	Mozilla Thunderbird < 8.0	high
279203	Mozilla Firefox < 3.5.4	critical
279202	Mozilla Firefox < 32.0	medium
279201	Mozilla Firefox < 2.0.0.19	medium
279198	Mozilla Thunderbird < 1.5.0.7	high
279197	Mozilla Firefox < 3.0.6	medium
279196	Mozilla Firefox < 22.0	high
279194	Mozilla Firefox < 40.0	high
279191	Mozilla Firefox < 1.5	high
279189	Mozilla Thunderbird < 1.0.8	high
279188	Mozilla Firefox < 3.6.9	high
279185	Mozilla Thunderbird < 31.1	medium
279180	Mozilla Thunderbird < 17.0.5	high
279179	Mozilla Firefox < 2.0.0.15	critical
279177	Mozilla Firefox ESR < 17.0.6	medium
279176	Mozilla Firefox ESR < 17.0.7	high
279174	Mozilla Firefox < 20.0	high
279172	Mozilla Firefox < 2.0.0.12	high
279171	Mozilla Thunderbird ESR < 17.0.6	medium
279169	Mozilla Thunderbird < 31.3	medium
279168	Mozilla Thunderbird < 3.1.3	high
279164	Mozilla Firefox < 36.0.3	critical
279160	Mozilla Thunderbird < 3.0.7	high
279158	Mozilla Firefox < 21.0	medium
279157	Mozilla Firefox ESR < 31.1	medium
279155	Mozilla Firefox < 3.5.12	high
279154	Mozilla Firefox < 3.5.6	critical
279149	Mozilla Firefox < 146.0.1	high
279148	Mozilla Firefox ESR < 31.5.2	critical

Detections

Analytics

MacOS X Local Security Checks Family for Nessus

high

high

medium

medium

high

high

critical

high

high

critical

high

medium

medium

critical

critical

critical

high

medium

high

medium

high

high

critical

medium

medium

high

medium

high

high

high

high

high

medium

high

critical

medium

high

high

high

medium

medium

high

critical

high

medium

medium

high

critical

high

critical