The version of Firefox ESR installed on the remote Windows host is prior to 115.23.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-38 advisory.

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array     index sizes. (CVE-2025-4919)

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object.
    (CVE-2025-4918)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 07560111-34cc-11f0-af94-b42e991fc52e advisory.

    security@mozilla.org reports:
    An attacker was able to perform an out-of-bounds read or               write on a JavaScript object by confusing array index sizes.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 128.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-37 advisory.

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array     index sizes. (CVE-2025-4919)

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object.
    (CVE-2025-4918)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.23.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-38 advisory.

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array     index sizes. (CVE-2025-4919)

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object.
    (CVE-2025-4918)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 138.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-36 advisory.

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array     index sizes. (CVE-2025-4919)

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object.
    (CVE-2025-4918)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of mozilla-firefox installed on the remote host is prior to 128.10.1esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-138-01 advisory.

    New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the mozilla-firefox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote Windows host is prior to 128.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-37 advisory.

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array     index sizes. (CVE-2025-4919)

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object.
    (CVE-2025-4918)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 138.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-36 advisory.

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array     index sizes. (CVE-2025-4919)

  - An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object.
    (CVE-2025-4918)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
236892	Mozilla Firefox ESR < 115.23.1	Nessus	Windows	5/17/2025	5/17/2025	high
236953	FreeBSD : firefox -- out-of-bounds read/write (07560111-34cc-11f0-af94-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	5/19/2025	5/19/2025	high
236888	Mozilla Firefox ESR < 128.10.1	Nessus	MacOS X Local Security Checks	5/17/2025	5/18/2025	high
236893	Mozilla Firefox ESR < 115.23.1	Nessus	MacOS X Local Security Checks	5/17/2025	5/17/2025	high
236890	Mozilla Firefox < 138.0.4	Nessus	Windows	5/17/2025	5/18/2025	high
236931	Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2025-138-01)	Nessus	Slackware Local Security Checks	5/19/2025	5/19/2025	high
236889	Mozilla Firefox ESR < 128.10.1	Nessus	Windows	5/17/2025	5/18/2025	high
236891	Mozilla Firefox < 138.0.4	Nessus	MacOS X Local Security Checks	5/17/2025	5/18/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high