Known vulnerabilities in firefox (Red Hat package) - page 8

Software CPE: cpe:2.3:o:red_hat:firefox_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 700
Public exploits: 16
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox (Red Hat package) firefox (Red Hat package) is affected by 700 known vulnerabilities: 7 critical, 341 high, 229 medium, 123 low Critical High Medium Low

Vulnerabilities (700)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124324 - Type conversion
CVE-2026-4718
CWE-704 Medium
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124325 - Out-of-bounds read
CVE-2026-4719
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124326 - Out-of-bounds write
CVE-2026-4720
CWE-787 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 35 more
#VU124310 - Exposure of sensitive information to an unauthorized actor
CVE-2026-4700
CWE-200 Medium
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124312 - Insufficient Control Flow Management
CVE-2026-4702
CWE-691 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124313 - Resource exhaustion
CVE-2026-4704
CWE-400 Medium
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124304 - Out-of-bounds read
CVE-2026-4707
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124297 - Improper Access Control
CVE-2026-4692
CWE-284 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124298 - Out-of-bounds read
CVE-2026-4693
CWE-125 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124299 - Integer overflow
CVE-2026-4694
CWE-190 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124300 - Use After Free
CVE-2026-4696
CWE-416 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU124293 - Out-of-bounds write
CVE-2026-4687
CWE-787 High
No
No
140.9.0-1.el7_9, 140.9.0-1.el8_2, 140.9.0-1.el8_4, 140.9.0-1.el8_6, 140.9.0-1.el8_10, 140.9.0-1.el9_0, 140.9.0-1.el9_2, 140.9.0-1.el9_4, 140.9.0-1.el9_7, 140.9.0-1.el10_0, 140.9.0-1.el10_1 24.03.2026 SB2026032468
SB20260325201
SB20260325202
and 36 more
#VU123211 - NULL Pointer Dereference
CVE-2026-2785
CWE-476 Low
No
No
140.8.0-2.el7_9, 140.8.0-2.el8_2, 140.8.0-2.el8_4, 140.8.0-2.el8_6, 140.8.0-2.el8_8, 140.8.0-2.el9_0, 140.8.0-2.el9_2, 140.8.0-2.el9_4, 140.8.0-2.el9_6, 140.8.0-2.el9_7, 140.8.0-2.el10_1 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123207 - Integer overflow
CVE-2026-2781
CWE-190 Low
No
No
140.8.0-2.el7_9, 140.8.0-2.el8_2, 140.8.0-2.el8_4, 140.8.0-2.el8_6, 140.8.0-2.el8_8, 140.8.0-2.el9_0, 140.8.0-2.el9_2, 140.8.0-2.el9_4, 140.8.0-2.el9_6, 140.8.0-2.el9_7, 140.8.0-2.el10_1 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 43 more
#VU123202 - Use After Free
CVE-2026-2766
CWE-416 High
No
No
140.8.0-2.el7_9, 140.8.0-2.el8_2, 140.8.0-2.el8_4, 140.8.0-2.el8_6, 140.8.0-2.el8_8, 140.8.0-2.el9_0, 140.8.0-2.el9_2, 140.8.0-2.el9_4, 140.8.0-2.el9_6, 140.8.0-2.el9_7, 140.8.0-2.el10_1 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 35 more
#VU123195 - Memory corruption
CVE-2026-2793
CWE-119 High
No
No
140.8.0-2.el7_9, 140.8.0-2.el8_2, 140.8.0-2.el8_4, 140.8.0-2.el8_6, 140.8.0-2.el8_8, 140.8.0-2.el9_0, 140.8.0-2.el9_2, 140.8.0-2.el9_4, 140.8.0-2.el9_6, 140.8.0-2.el9_7, 140.8.0-2.el10_1 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123189 - Memory corruption
CVE-2026-2776
CWE-119 High
No
No
140.8.0-2.el7_9, 140.8.0-2.el8_2, 140.8.0-2.el8_4, 140.8.0-2.el8_6, 140.8.0-2.el8_8, 140.8.0-2.el9_0, 140.8.0-2.el9_2, 140.8.0-2.el9_4, 140.8.0-2.el9_6, 140.8.0-2.el9_7, 140.8.0-2.el10_1 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 33 more
#VU123187 - Integer overflow
CVE-2026-2774
CWE-190 High
No
No
140.8.0-2.el7_9, 140.8.0-2.el8_2, 140.8.0-2.el8_4, 140.8.0-2.el8_6, 140.8.0-2.el8_8, 140.8.0-2.el9_0, 140.8.0-2.el9_2, 140.8.0-2.el9_4, 140.8.0-2.el9_6, 140.8.0-2.el9_7, 140.8.0-2.el10_1 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU123185 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-2771
CWE-74 High
No
No
140.8.0-2.el7_9, 140.8.0-2.el8_2, 140.8.0-2.el8_4, 140.8.0-2.el8_6, 140.8.0-2.el8_8, 140.8.0-2.el9_0, 140.8.0-2.el9_2, 140.8.0-2.el9_4, 140.8.0-2.el9_6, 140.8.0-2.el9_7, 140.8.0-2.el10_1 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU122970 - Heap-based Buffer Overflow
CVE-2026-2447
CWE-122 High
No
No
140.8.0-2.el7_9, 140.8.0-2.el8_2, 140.8.0-2.el8_4, 140.8.0-2.el8_6, 140.8.0-2.el8_8, 140.8.0-2.el9_0, 140.8.0-2.el9_2, 140.8.0-2.el9_4, 140.8.0-2.el9_6, 140.8.0-2.el9_7, 140.8.0-2.el10_1 16.02.2026 SB20260216163
SB20260216169
SB2026022003
and 43 more


Showing elements 141 - 160 out of 700