Known vulnerabilities in firefox (Red Hat package) - page 33

Software CPE: cpe:2.3:o:red_hat:firefox_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 700
Public exploits: 16
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox (Red Hat package) firefox (Red Hat package) is affected by 700 known vulnerabilities: 7 critical, 341 high, 229 medium, 123 low Critical High Medium Low

Vulnerabilities (700)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49024 - Memory corruption
CVE-2020-35113
CWE-119 High
No
No
78.6.0-1.el7_9, 78.6.0-1.el8_0, 78.6.0-1.el8_1, 78.6.0-1.el8_2, 78.6.0-1.el8_3 15.12.2020 SB2020121531
SB2020121533
SB2020121625
and 21 more
#VU49022 - Exposure of sensitive information to an unauthorized actor
CVE-2020-35111
CWE-200 Medium
No
No
78.6.0-1.el7_9, 78.6.0-1.el8_0, 78.6.0-1.el8_1, 78.6.0-1.el8_2, 78.6.0-1.el8_3 15.12.2020 SB2020121531
SB2020121533
SB2020121625
and 20 more
#VU49020 - Permissions, Privileges, and Access Controls
CVE-2020-26978
CWE-264 Medium
No
No
78.6.0-1.el7_9, 78.6.0-1.el8_0, 78.6.0-1.el8_1, 78.6.0-1.el8_2, 78.6.0-1.el8_3 15.12.2020 SB2020121531
SB2020121533
SB2020121625
and 20 more
#VU49016 - Type confusion
CVE-2020-26974
CWE-843 High
No
No
78.6.0-1.el7_9, 78.6.0-1.el8_0, 78.6.0-1.el8_1, 78.6.0-1.el8_2, 78.6.0-1.el8_3 15.12.2020 SB2020121531
SB2020121533
SB2020121625
and 20 more
#VU48472 - Memory corruption
CVE-2020-26968
CWE-119 High
No
No
78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48469 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26965
CWE-200 Low
No
No
78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48466 - Improperly Implemented Security Check for Standard
CVE-2020-26961
CWE-358 Medium
No
No
78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48465 - Use After Free
CVE-2020-26960
CWE-416 High
No
No
78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48464 - Use After Free
CVE-2020-26959
CWE-416 Medium
No
No
78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48463 - Permissions, Privileges, and Access Controls
CVE-2020-26958
CWE-264 Medium
No
No
78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26956
CWE-79 Medium
No
No
78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48461 -
CVE-2020-26953
Medium
No
No
78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48460 - Origin Validation Error
CVE-2020-16012
CWE-346 Medium
Available
No
78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 34 more
#VU48458 - Improper input validation
CVE-2020-26951
CWE-20 Medium
No
No
78.5.0-1.el6_10, 78.5.0-1.el7_9, 78.5.0-1.el8_0, 78.5.0-1.el8_1, 78.5.0-1.el8_2, 78.5.0-1.el8_3 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 25 more
#VU48235 - Use After Free
CVE-2020-26950
CWE-416 High
Available
No
78.4.1-1.el6_10, 78.4.1-1.el7_9, 78.4.1-1.el8_0, 78.4.1-1.el8_1, 78.4.1-1.el8_2, 78.4.1-1.el8_3 09.11.2020 SB2020110949
SB2020110950
SB2020111001
and 25 more
#VU47746 - Memory corruption
CVE-2020-15683
CWE-119 High
No
No
78.4.0-1.el7_9, 78.4.0-1.el8_0, 78.4.0-1.el8_1, 78.4.0-1.el8_2, 78.4.0-2.el6_10 20.10.2020 SB2020102042
SB2020102207
SB2020102311
and 26 more
#VU47360 - Use After Free
CVE-2020-15969
CWE-416 High
No
No
78.4.0-1.el7_9, 78.4.0-1.el8_0, 78.4.0-1.el8_1, 78.4.0-1.el8_2, 78.4.0-2.el6_10 07.10.2020 SB2020100713
SB2020101003
SB2020101319
and 55 more
#VU29464 - Out-of-bounds read
CVE-2020-12425
CWE-125 Medium
No
No
78.2.0-2.el8_2, 78.2.0-3.el8_0, 78.2.0-3.el8_1, 78.3.0-1.el7_9 02.07.2020 SB2020070208
SB2020071802
SB2020072011
and 8 more
#VU29463 - Origin Validation Error
CVE-2020-12424
CWE-346 Medium
No
No
78.2.0-2.el8_2, 78.2.0-3.el8_0, 78.2.0-3.el8_1, 78.3.0-1.el7_9 02.07.2020 SB2020070208
SB2020071802
SB2020072011
and 8 more
#VU29461 - Integer overflow
CVE-2020-12422
CWE-190 High
No
No
78.2.0-2.el8_2, 78.2.0-3.el8_0, 78.2.0-3.el8_1, 78.3.0-1.el7_9 02.07.2020 SB2020070208
SB2020071802
SB2020072011
and 8 more


Showing elements 641 - 660 out of 700