Known vulnerabilities in firefox (Red Hat package) 60.7.0-1.el6_10

Vendor: Red Hat Inc.

Software: firefox (Red Hat package)

Version: 60.7.0-1.el6_10

Software CPE: cpe:2.3:o:red_hat:firefox_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 22

Public exploits: 2

Known exploited (KEV): 2

Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Vulnerabilities (22)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU48472 - Memory corruption CVE-2020-26968	CWE-119	High	No	No	78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3	17.11.2020	SB2020111707 SB2020111708 SB2020111709 and 26 more
#VU48469 - Exposure of sensitive information to an unauthorized actor CVE-2020-26965	CWE-200	Low	No	No	78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3	17.11.2020	SB2020111707 SB2020111708 SB2020111709 and 26 more
#VU48466 - Improperly Implemented Security Check for Standard CVE-2020-26961	CWE-358	Medium	No	No	78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3	17.11.2020	SB2020111707 SB2020111708 SB2020111709 and 26 more
#VU48465 - Use After Free CVE-2020-26960	CWE-416	High	No	No	78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3	17.11.2020	SB2020111707 SB2020111708 SB2020111709 and 26 more
#VU48464 - Use After Free CVE-2020-26959	CWE-416	Medium	No	No	78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3	17.11.2020	SB2020111707 SB2020111708 SB2020111709 and 26 more
#VU48463 - Permissions, Privileges, and Access Controls CVE-2020-26958	CWE-264	Medium	No	No	78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3	17.11.2020	SB2020111707 SB2020111708 SB2020111709 and 26 more
#VU48462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-26956	CWE-79	Medium	No	No	78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3	17.11.2020	SB2020111707 SB2020111708 SB2020111709 and 26 more
#VU48461 - CVE-2020-26953		Medium	No	No	78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3	17.11.2020	SB2020111707 SB2020111708 SB2020111709 and 26 more
#VU48460 - Origin Validation Error CVE-2020-16012	CWE-346	Medium	Public exploit available	No	78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3	17.11.2020	SB2020111707 SB2020111708 SB2020111709 and 34 more
#VU48458 - Improper input validation CVE-2020-26951	CWE-20	Medium	No	No	78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3	17.11.2020	SB2020111707 SB2020111708 SB2020111709 and 25 more
#VU48235 - Use After Free CVE-2020-26950	CWE-416	High	Public exploit available	No	78.4.1-1.el6_10, 78.4.1-1.el7_9, 78.4.1-1.el8_0, 78.4.1-1.el8_1, 78.4.1-1.el8_2, 78.4.1-1.el8_3	09.11.2020	SB2020110949 SB2020110950 SB2020111001 and 25 more
#VU47746 - Memory corruption CVE-2020-15683	CWE-119	High	No	No	78.4.0-1.el7_9, 78.4.0-1.el8_0, 78.4.0-1.el8_1, 78.4.0-1.el8_2, 78.4.0-2.el6_10	20.10.2020	SB2020102042 SB2020102207 SB2020102311 and 26 more
#VU47360 - Use After Free CVE-2020-15969	CWE-416	High	No	No	78.4.0-1.el7_9, 78.4.0-1.el8_0, 78.4.0-1.el8_1, 78.4.0-1.el8_2, 78.4.0-2.el6_10	07.10.2020	SB2020100713 SB2020101003 SB2020101319 and 55 more
#VU46966 - Memory corruption CVE-2020-15673	CWE-119	High	No	No	78.3.0-1.el6_10, 78.3.0-1.el7_9, 78.3.0-1.el8_0, 78.3.0-1.el8_1, 78.3.0-1.el8_2	23.09.2020	SB2020092302 SB2020092304 SB2020092308 and 21 more
#VU46965 - Use After Free CVE-2020-15678	CWE-416	Medium	No	No	78.3.0-1.el6_10, 78.3.0-1.el7_9, 78.3.0-1.el8_0, 78.3.0-1.el8_1, 78.3.0-1.el8_2	23.09.2020	SB2020092302 SB2020092304 SB2020092314 and 21 more
#VU46964 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-15676	CWE-79	Medium	No	No	78.3.0-1.el6_10, 78.3.0-1.el7_9, 78.3.0-1.el8_0, 78.3.0-1.el8_1, 78.3.0-1.el8_2	23.09.2020	SB2020092302 SB2020092304 SB2020092310 and 21 more
#VU46963 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2020-15677	CWE-451	Low	No	No	78.3.0-1.el6_10, 78.3.0-1.el7_9, 78.3.0-1.el8_0, 78.3.0-1.el8_1, 78.3.0-1.el8_2	23.09.2020	SB2020092302 SB2020092304 SB2020092312 and 21 more
#VU26653 - Memory corruption CVE-2020-6825	CWE-119	High	No	No	68.7.0-2.el6_10, 68.7.0-2.el7_8, 68.7.0-2.el8_0, 68.7.0-2.el8_1	07.04.2020	SB2020040743 SB2020040744 SB2020040748 and 25 more
#VU26650 - Out-of-bounds write CVE-2020-6822	CWE-787	High	No	No	68.7.0-2.el6_10, 68.7.0-2.el7_8, 68.7.0-2.el8_0, 68.7.0-2.el8_1	07.04.2020	SB2020040743 SB2020040744 SB2020040748 and 24 more
#VU26649 - Out-of-bounds read CVE-2020-6821	CWE-125	Medium	No	No	68.7.0-2.el6_10, 68.7.0-2.el7_8, 68.7.0-2.el8_0, 68.7.0-2.el8_1	07.04.2020	SB2020040743 SB2020040744 SB2020040748 and 26 more

Showing elements 1 - 20 out of 22

Known vulnerabilities in firefox (Red Hat package) 60.7.0-1.el6_10

Vulnerabilities by Severity

Vulnerabilities (22)

Please verify you're human