Known vulnerabilities in firefox (Red Hat package) - page 7

Software CPE: cpe:2.3:o:red_hat:firefox_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 700
Public exploits: 16
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox (Red Hat package) firefox (Red Hat package) is affected by 700 known vulnerabilities: 7 critical, 341 high, 229 medium, 123 low Critical High Medium Low

Vulnerabilities (700)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124320 - Out-of-bounds read
CVE-2026-4714
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124321 - Use of Uninitialized Variable
CVE-2026-4715
CWE-457 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124322 - Out-of-bounds read
CVE-2026-4716
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124314 - Type conversion
CVE-2026-4705
CWE-704 Medium
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124315 - Out-of-bounds read
CVE-2026-4708
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124316 - Out-of-bounds read
CVE-2026-4710
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124317 - Use After Free
CVE-2026-4711
CWE-416 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 33 more
#VU124318 - Exposure of sensitive information to an unauthorized actor
CVE-2026-4712
CWE-200 Low
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 33 more
#VU124319 - Out-of-bounds read
CVE-2026-4713
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124308 - Out-of-bounds read
CVE-2026-4695
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124309 - Out-of-bounds read
CVE-2026-4697
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124305 - Out-of-bounds read
CVE-2026-4709
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124301 - Heap-based Buffer Overflow
CVE-2026-4698
CWE-122 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124302 - Out-of-bounds read
CVE-2026-4699
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124296 - Use After Free
CVE-2026-4691
CWE-416 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124292 - Out-of-bounds read
CVE-2026-4686
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124294 - Integer overflow
CVE-2026-4689
CWE-190 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124295 - Integer overflow
CVE-2026-4690
CWE-190 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124290 - Use After Free
CVE-2026-4684
CWE-416 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 35 more
#VU124291 - Out-of-bounds read
CVE-2026-4685
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more


Showing elements 121 - 140 out of 700