Homepage

firefox

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the firefox package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Directory Traversal

*
  • M
CVE-2026-15718

*
  • M
Incorrect Privilege Assignment

*
  • M
Insufficient Compartmentalization

*
  • H
Out-of-bounds Write

*
  • M
Trust Boundary Violation

*
  • M
CVE-2026-16390

*
  • M
Information Exposure

*
  • M
CVE-2026-16377

*
  • M
Buffer Overflow

*
  • H
Trust Boundary Violation

*
  • M
CVE-2026-16375

*
  • H
Origin Validation Error

*
  • H
Expired Pointer Dereference

*
  • H
Out-of-bounds Write

*
  • M
CVE-2026-16391

*
  • M
Race Condition

*
  • M
Incorrect Privilege Assignment

*
  • H
Compiler Optimization Removal or Modification of Security-critical Code

*
  • L
Information Exposure

*
  • H
Expired Pointer Dereference

*
  • M
Origin Validation Error

*
  • M
Reliance on Untrusted Inputs in a Security Decision

*
  • H
CVE-2026-16355

*
  • M
Integer Overflow or Wraparound

*
  • M
Information Exposure

*
  • H
Buffer Overflow

*
  • H
CVE-2026-16361

*
  • M
Out-of-bounds Write

*
  • H
CVE-2026-16350

*
  • H
Missing Release of Resource after Effective Lifetime

*
  • M
NULL Pointer Dereference

*
  • H
CVE-2026-16356

*
  • M
Buffer Overflow

*
  • H
Heap-based Buffer Overflow

*
  • H
Buffer Access with Incorrect Length Value

<0:140.10.1-1.el10_2
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Read

*
  • H
Heap-based Buffer Overflow

*
  • L
Incorrect Calculation of Buffer Size

<0:140.12.0-1.el10_2
  • M
CVE-2026-12308

<0:140.12.0-1.el10_2
  • M
File Descriptor Leak

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • M
Incorrect Calculation of Buffer Size

<0:140.12.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.12.0-1.el10_2
  • M
Origin Validation Error

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • H
File Descriptor Leak

<0:140.12.0-1.el10_2
  • L
Improper Validation of Syntactic Correctness of Input

<0:140.12.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • H
Use of Out-of-range Pointer Offset

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • M
Creation of chroot Jail Without Changing Working Directory

<0:140.12.0-1.el10_2
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.12.0-1.el10_2
  • M
CVE-2026-12302

<0:140.12.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.12.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.12.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.12.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.12.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.12.0-1.el10_2
  • H
CVE-2026-12329

<0:140.12.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • M
Uncontrolled Recursion

*
  • M
Cross-site Scripting (XSS)

*
  • L
Improper Validation of Integrity Check Value

*
  • M
HTTP Request Smuggling

*
  • M
Incorrect Privilege Assignment

<0:140.11.0-1.el10_2
  • M
HTTP Request Smuggling

*
  • L
Improperly Implemented Security Check for Standard

<0:140.11.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • M
Integer Overflow or Wraparound

<0:140.11.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.11.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.11.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.11.0-1.el10_2
  • M
Integer Overflow or Wraparound

<0:140.11.0-1.el10_2
  • L
Incorrect Privilege Assignment

<0:140.11.0-1.el10_2
  • L
External Control of Assumed-Immutable Web Parameter

<0:140.11.0-1.el10_2
  • L
CVE-2026-8968

<0:140.11.0-1.el10_2
  • M
CVE-2026-8950

<0:140.11.0-1.el10_2
  • M
File Descriptor Leak

<0:140.11.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.11.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • H
Undefined Behavior for Input to API

<0:140.11.0-1.el10_2
  • H
CVE-2026-7323

<0:140.10.1-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.1-1.el10_2
  • M
Trust Boundary Violation

<0:140.10.1-1.el10_2
  • H
Out-of-bounds Read

<0:140.10.1-1.el10_2
  • H
CVE-2026-8094

<0:140.10.2-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.2-1.el10_2
  • H
Expired Pointer Dereference

<0:140.10.2-1.el10_2
  • M
Out-of-bounds Write

*
  • M
Cross-site Scripting (XSS)

*
  • L
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • M
Use of Out-of-range Pointer Offset

<0:140.10.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • H
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.10.0-1.el10_2
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_2
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • M
Improperly Implemented Security Check for Standard

<0:140.10.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_2
  • L
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_2
  • M
Improper Handling of File Names

<0:140.10.0-1.el10_2
  • M
Improper Restriction of Rendered UI Layers or Frames

<0:140.10.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_2
  • M
Expected Behavior Violation

<0:140.10.0-1.el10_2
  • M
Out-of-bounds Read

<0:140.10.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • M
Use of Potentially Dangerous Function

<0:140.10.0-1.el10_2
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.10.0-1.el10_2
  • M
Buffer Access with Incorrect Length Value

<0:140.10.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Integer Overflow or Wraparound

*
  • M
Expired Pointer Dereference

*
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.1-1.el10_1
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Arbitrary Code Injection

*
  • M
Expired Pointer Dereference

<0:140.9.1-1.el10_1
  • M
Buffer Underflow

<0:140.9.1-1.el10_1
  • M
Buffer Access with Incorrect Length Value

*
  • M
Incorrect Privilege Assignment

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • L
Buffer Access with Incorrect Length Value

<0:140.9.0-1.el10_1
  • M
Allocation of Resources Without Limits or Throttling

<0:140.9.0-1.el10_1
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_1
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_1
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.9.0-1.el10_1
  • M
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • L
Undefined Behavior for Input to API

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Undefined Behavior for Input to API

<0:140.9.0-1.el10_1
  • M
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Read

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Buffer Overflow

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Insufficient Compartmentalization

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Trust Boundary Violation

<0:140.9.0-1.el10_1
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
HTTP Request Smuggling

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Incorrect Calculation of Buffer Size

<0:140.9.0-1.el10_1
  • H
Race Condition

<0:140.9.0-1.el10_1
  • M
CVE-2026-23865

*
  • M
Unchecked Input for Loop Condition

*
  • H
CVE-2026-2757

<0:140.8.0-2.el10_1
  • L
CVE-2026-2791

<0:140.8.0-2.el10_1
  • L
CVE-2026-2790

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
CVE-2026-2788

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
Access of Uninitialized Pointer

<0:140.8.0-2.el10_1
  • M
CVE-2026-2782

<0:140.8.0-2.el10_1
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.8.0-2.el10_1
  • M
CVE-2026-2780

<0:140.8.0-2.el10_1
  • M
CVE-2026-2784

<0:140.8.0-2.el10_1
  • M
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • M
CVE-2026-2779

<0:140.8.0-2.el10_1
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_1
  • H
CVE-2026-2778

<0:140.8.0-2.el10_1
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_1
  • H
CVE-2026-2775

<0:140.8.0-2.el10_1
  • H
CVE-2026-2776

<0:140.8.0-2.el10_1
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • H
CVE-2026-2769

<0:140.8.0-2.el10_1
  • H
CVE-2026-2777

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2773

<0:140.8.0-2.el10_1
  • H
CVE-2026-2771

<0:140.8.0-2.el10_1
  • H
CVE-2026-2768

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2761

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2760

<0:140.8.0-2.el10_1
  • H
CVE-2026-2759

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • H
CVE-2026-2447

<0:140.8.0-2.el10_1
  • M
Incorrect Behavior Order: Early Validation

*
  • L
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Buffer Overflow

*
  • M
Deserialization of Untrusted Data

*
  • M
Improper Input Validation

*
  • M
CRLF Injection

*
  • M
CRLF Injection

*
  • M
Arbitrary Code Injection

*
  • M
Improper Neutralization

*
  • L
CVE-2026-0890

<0:140.7.0-1.el10_1
  • M
Authentication Bypass

<0:140.7.0-1.el10_1
  • M
NULL Pointer Dereference

*
  • M
CVE-2026-0887

<0:140.7.0-1.el10_1
  • M
CVE-2026-0884

<0:140.7.0-1.el10_1
  • M
CVE-2026-0886

<0:140.7.0-1.el10_1
  • M
CVE-2026-0885

<0:140.7.0-1.el10_1
  • M
CVE-2026-0883

<0:140.7.0-1.el10_1
  • H
CVE-2026-0880

<0:140.7.0-1.el10_1
  • H
CVE-2026-0878

<0:140.7.0-1.el10_1
  • H
CVE-2026-0882

<0:140.7.0-1.el10_1
  • H
CVE-2026-0879

<0:140.7.0-1.el10_1
  • H
CVE-2026-0877

<0:140.7.0-1.el10_1
  • H
CVE-2026-0891

<0:140.7.0-1.el10_1
  • M
CVE-2025-14329

<0:140.6.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.6.0-1.el10_1
  • M
CVE-2025-14330

<0:140.6.0-1.el10_1
  • H
CVE-2025-14323

<0:140.6.0-1.el10_1
  • M
Origin Validation Error

<0:140.6.0-1.el10_1
  • H
CVE-2025-14324

<0:140.6.0-1.el10_1
  • H
Arbitrary Code Injection

<0:140.6.0-1.el10_1
  • H
CVE-2025-14322

<0:140.6.0-1.el10_1
  • M
CVE-2025-14328

<0:140.6.0-1.el10_1
  • H
Use After Free

<0:140.6.0-1.el10_1
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Out-of-bounds Read

*
  • L
Algorithmic Complexity

*
  • M
Out-of-bounds Read

*
  • L
Authentication Bypass

<0:140.5.0-2.el10_1
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_1
  • M
Origin Validation Error

<0:140.5.0-2.el10_1
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_1
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_1
  • M
Trust Boundary Violation

<0:140.5.0-2.el10_1
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_1
  • H
Out-of-bounds Write

<0:140.5.0-2.el10_1
  • H
Race Condition

<0:140.5.0-2.el10_1
  • L
Allocation of Resources Without Limits or Throttling

*
  • H
Out-of-bounds Write

<0:140.4.0-3.el10_0
  • H
Use After Free

<0:140.4.0-3.el10_0
  • M
Interpretation Conflict

<0:140.4.0-3.el10_0
  • H
Out-of-Bounds

<0:140.4.0-3.el10_0
  • H
Improper Access Control

<0:140.4.0-3.el10_0
  • H
Out-of-Bounds

<0:140.4.0-3.el10_0
  • H
Exposure of System Data to an Unauthorized Control Sphere

<0:140.4.0-3.el10_0
  • M
Out-of-bounds Read

<0:140.3.0-1.el10_0
  • M
Integer Overflow or Wraparound

<0:140.3.0-1.el10_0
  • M
CVE-2025-10529

<0:140.3.0-1.el10_0
  • H
Access of Uninitialized Pointer

<0:140.3.0-1.el10_0
  • H
CVE-2025-10537

<0:140.3.0-1.el10_0
  • L
CVE-2025-10536

<0:140.3.0-1.el10_0
  • H
Use After Free

<0:140.3.0-1.el10_0
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Improper Neutralization

*
  • M
Information Exposure Through Caching

*
  • M
Improper Input Validation

*
  • L
Resource Exhaustion

<0:128.14.0-2.el10_0
  • H
Out-of-Bounds

<0:128.14.0-2.el10_0
  • M
Improper Initialization

<0:128.14.0-2.el10_0
  • H
Out-of-Bounds

<0:128.14.0-2.el10_0
  • H
Information Exposure

<0:128.14.0-2.el10_0
  • L
Improper Encoding or Escaping of Output

*
  • M
Buffer Over-read

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Arbitrary Code Injection

<0:128.13.0-1.el10_0
  • M
Incorrect Default Permissions

<0:128.13.0-1.el10_0
  • M
Cross-site Scripting (XSS)

<0:128.13.0-1.el10_0
  • H
Out-of-Bounds

<0:128.13.0-1.el10_0
  • M
Protection Mechanism Failure

<0:128.13.0-1.el10_0
  • H
Use of Uninitialized Variable

<0:128.13.0-1.el10_0
  • L
NULL Pointer Dereference

<0:128.13.0-1.el10_0
  • H
Insufficient Protection Against Instruction Skipping Via Fault Injection

<0:128.13.0-1.el10_0
  • H
Out-of-Bounds

<0:128.13.0-1.el10_0
  • L
Race Condition

*
  • L
Improper Validation of Specified Quantity in Input

*
  • L
Uncontrolled Memory Allocation

*
  • L
Improper Check for Unusual or Exceptional Conditions

*
  • L
Information Exposure

*
  • M
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Information Exposure

*
  • M
User Interface (UI) Misrepresentation of Critical Information

*
  • M
Use After Free

*
  • M
Out-of-Bounds

*
  • M
Buffer Overflow

*
  • M
Use After Free

*
  • M
Buffer Overflow

*
  • M
Out-of-Bounds

*
  • M
Use After Free

*
  • M
Open Redirect

*
  • M
Unintended Proxy or Intermediary ('Confused Deputy')

*
  • M
Out-of-Bounds

*
  • M
Improper Restriction of Rendered UI Layers or Frames

*
  • M
Access of Uninitialized Pointer

*
  • M
Missing Authentication for Critical Function

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Use After Free

*
  • H
Use After Free

*
  • H
Arbitrary Code Injection

*
  • H
Arbitrary Code Injection

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Improper Restriction of Rendered UI Layers or Frames

*
  • H
Buffer Overflow

*
  • M
HTTP Request Smuggling

*
  • L
HTTP Request Smuggling

*
  • L
Improper Input Validation

*
  • M
Information Exposure

<0:128.12.0-1.el10_0
  • M
Cross-site Scripting (XSS)

<0:128.12.0-1.el10_0
  • M
Use of Incorrectly-Resolved Name or Reference

<0:128.12.0-1.el10_0
  • H
Use After Free

<0:128.12.0-1.el10_0
  • L
Allocation of Resources Without Limits or Throttling

*
  • L
Expired Pointer Dereference

*
  • L
Reachable Assertion

*
  • H
Double Free

<0:128.11.0-1.el10_0
  • L
Improper Check for Unusual or Exceptional Conditions

*
  • L
Improper Restriction of Rendered UI Layers or Frames

*
  • M
Improper Cleanup on Thrown Exception

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Use After Free

*
  • H
Use After Free

*
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • H
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

*
  • L
Information Exposure

*
  • L
Use After Free

*
  • M
Double Free

*
  • L
Product UI does not Warn User of Unsafe Actions

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improper Validation of Integrity Check Value

*
  • H
Buffer Overflow

*
  • M
Incomplete Filtering of Special Elements

*
  • M
Buffer Overflow

<0:128.10.0-1.el10_0
  • M
Out-of-bounds Read

<0:128.10.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:128.10.0-1.el10_0
  • H
Arbitrary Code Injection

<0:128.10.0-1.el10_0
  • H
Buffer Overflow

<0:128.10.0-1.el10_0
  • M
Origin Validation Error

<0:128.9.0-3.el10_0
  • H
Use After Free

<0:128.9.0-3.el10_0
  • H
Buffer Overflow

<0:128.9.0-3.el10_0
  • H
Out-of-bounds Write

<0:128.10.1-1.el10_0
  • H
Out-of-bounds Write

<0:128.10.1-1.el10_0
  • L
Improper Restriction of Rendered UI Layers or Frames

<0:128.11.0-1.el10_0
  • M
Out-of-Bounds

<0:128.11.0-1.el10_0
  • M
Inclusion of Functionality from Untrusted Control Sphere

<0:128.11.0-1.el10_0
  • M
Inclusion of Functionality from Untrusted Control Sphere

<0:128.11.0-1.el10_0
  • M
Improper Encoding or Escaping of Output

<0:128.11.0-1.el10_0
  • M
Out-of-Bounds

<0:128.11.0-1.el10_0
  • M
Improper Validation of Unsafe Equivalence in Input

*
  • M
CVE-2025-48068

*
  • L
Race Condition

*