Homepage

firefox

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the firefox package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Expired Pointer Dereference

*
  • M
Use of Out-of-range Pointer Offset

*
  • H
Expired Pointer Dereference

*
  • H
Out-of-bounds Write

*
  • H
Incorrect Calculation of Buffer Size

*
  • H
Incorrect Privilege Assignment

*
  • H
Access of Uninitialized Pointer

*
  • H
Access of Uninitialized Pointer

*
  • H
Expired Pointer Dereference

*
  • H
Access of Uninitialized Pointer

*
  • H
Expired Pointer Dereference

*
  • H
Out-of-bounds Write

*
  • M
Improperly Implemented Security Check for Standard

*
  • M
Out-of-bounds Write

*
  • M
Incorrect Privilege Assignment

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Improper Handling of File Names

*
  • M
Improper Restriction of Rendered UI Layers or Frames

*
  • M
Incorrect Privilege Assignment

*
  • M
Expected Behavior Violation

*
  • M
Out-of-bounds Read

*
  • H
Out-of-bounds Write

*
  • M
Use of Potentially Dangerous Function

*
  • M
Exposure of Private Information ('Privacy Violation')

*
  • M
Buffer Access with Incorrect Length Value

*
  • H
Out-of-bounds Write

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Integer Overflow or Wraparound

*
  • H
Insufficient Compartmentalization

<0:140.9.0-1.el10_0
  • L
Buffer Access with Incorrect Length Value

<0:140.9.0-1.el10_0
  • L
Undefined Behavior for Input to API

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.9.0-1.el10_0
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • M
Undefined Behavior for Input to API

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Read

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Allocation of Resources Without Limits or Throttling

<0:140.9.0-1.el10_0
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • H
Trust Boundary Violation

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.9.0-1.el10_0
  • H
Race Condition

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_0
  • H
HTTP Request Smuggling

<0:140.9.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_0
  • M
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.9.1-1.el10_1
  • H
Incorrect Calculation of Buffer Size

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • H
Buffer Overflow

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • H
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_0
  • M
Buffer Underflow

<0:140.9.1-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.1-1.el10_1
  • M
Expired Pointer Dereference

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Arbitrary Code Injection

*
  • M
Buffer Access with Incorrect Length Value

*
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
HTTP Request Smuggling

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Incorrect Calculation of Buffer Size

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • L
Buffer Access with Incorrect Length Value

<0:140.9.0-1.el10_1
  • L
Undefined Behavior for Input to API

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Read

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.9.0-1.el10_1
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_1
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_1
  • M
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_1
  • H
Buffer Overflow

<0:140.9.0-1.el10_1
  • M
Undefined Behavior for Input to API

<0:140.9.0-1.el10_1
  • M
Incorrect Privilege Assignment

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Insufficient Compartmentalization

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • M
Allocation of Resources Without Limits or Throttling

<0:140.9.0-1.el10_1
  • H
Trust Boundary Violation

<0:140.9.0-1.el10_1
  • H
Race Condition

<0:140.9.0-1.el10_1
  • L
CVE-2026-2791

<0:140.8.0-2.el10_0
  • M
Use After Free

<0:140.8.0-2.el10_0
  • L
CVE-2026-2790

<0:140.8.0-2.el10_0
  • M
Access of Uninitialized Pointer

<0:140.8.0-2.el10_0
  • M
Use After Free

<0:140.8.0-2.el10_0
  • M
Use After Free

<0:140.8.0-2.el10_0
  • M
CVE-2026-2788

<0:140.8.0-2.el10_0
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.8.0-2.el10_0
  • M
CVE-2026-2784

<0:140.8.0-2.el10_0
  • M
CVE-2026-2782

<0:140.8.0-2.el10_0
  • H
CVE-2026-2775

<0:140.8.0-2.el10_0
  • M
Integer Overflow or Wraparound

<0:140.8.0-2.el10_0
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_0
  • H
CVE-2026-2777

<0:140.8.0-2.el10_0
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_0
  • M
CVE-2026-2779

<0:140.8.0-2.el10_0
  • H
CVE-2026-2776

<0:140.8.0-2.el10_0
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2778

<0:140.8.0-2.el10_0
  • M
CVE-2026-2780

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2771

<0:140.8.0-2.el10_0
  • H
CVE-2026-2768

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2769

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_0
  • H
CVE-2026-2760

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2773

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2759

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2757

<0:140.8.0-2.el10_0
  • H
CVE-2026-2761

<0:140.8.0-2.el10_0
  • H
CVE-2026-2447

<0:140.8.0-2.el10_0
  • M
CVE-2026-23865

*
  • M
Unchecked Input for Loop Condition

*
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_1
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_1
  • L
CVE-2026-2791

<0:140.8.0-2.el10_1
  • L
CVE-2026-2790

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
CVE-2026-2782

<0:140.8.0-2.el10_1
  • M
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • M
CVE-2026-2788

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
CVE-2026-2784

<0:140.8.0-2.el10_1
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.8.0-2.el10_1
  • M
Access of Uninitialized Pointer

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
CVE-2026-2779

<0:140.8.0-2.el10_1
  • H
CVE-2026-2778

<0:140.8.0-2.el10_1
  • H
CVE-2026-2776

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2775

<0:140.8.0-2.el10_1
  • H
CVE-2026-2777

<0:140.8.0-2.el10_1
  • H
CVE-2026-2773

<0:140.8.0-2.el10_1
  • H
CVE-2026-2769

<0:140.8.0-2.el10_1
  • M
CVE-2026-2780

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2768

<0:140.8.0-2.el10_1
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2771

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2760

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • H
CVE-2026-2761

<0:140.8.0-2.el10_1
  • H
CVE-2026-2759

<0:140.8.0-2.el10_1
  • H
CVE-2026-2757

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2447

<0:140.8.0-2.el10_1
  • M
Incorrect Behavior Order: Early Validation

*
  • L
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
CVE-2026-0890

<0:140.7.0-1.el10_1
  • L
CVE-2026-0890

<0:140.7.0-1.el10_0
  • M
CVE-2026-0886

<0:140.7.0-1.el10_1
  • M
CVE-2026-0886

<0:140.7.0-1.el10_0
  • M
CVE-2026-0885

<0:140.7.0-1.el10_1
  • M
CVE-2026-0885

<0:140.7.0-1.el10_0
  • M
CVE-2026-0883

<0:140.7.0-1.el10_1
  • M
CVE-2026-0883

<0:140.7.0-1.el10_0
  • M
CVE-2026-0887

<0:140.7.0-1.el10_1
  • M
CVE-2026-0887

<0:140.7.0-1.el10_0
  • M
Authentication Bypass

<0:140.7.0-1.el10_1
  • M
CVE-2026-0884

<0:140.7.0-1.el10_1
  • M
Authentication Bypass

<0:140.7.0-1.el10_0
  • M
CVE-2026-0884

<0:140.7.0-1.el10_0
  • H
CVE-2026-0877

<0:140.7.0-1.el10_1
  • H
CVE-2026-0877

<0:140.7.0-1.el10_0
  • H
CVE-2026-0882

<0:140.7.0-1.el10_1
  • H
CVE-2026-0882

<0:140.7.0-1.el10_0
  • H
CVE-2026-0891

<0:140.7.0-1.el10_1
  • H
CVE-2026-0879

<0:140.7.0-1.el10_1
  • H
CVE-2026-0879

<0:140.7.0-1.el10_0
  • H
CVE-2026-0891

<0:140.7.0-1.el10_0
  • H
CVE-2026-0880

<0:140.7.0-1.el10_1
  • H
CVE-2026-0880

<0:140.7.0-1.el10_0
  • H
CVE-2026-0878

<0:140.7.0-1.el10_1
  • H
CVE-2026-0878

<0:140.7.0-1.el10_0
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Buffer Overflow

*
  • M
Deserialization of Untrusted Data

*
  • M
Improper Input Validation

*
  • M
CRLF Injection

*
  • M
CRLF Injection

*
  • M
Arbitrary Code Injection

*
  • M
Improper Neutralization

*
  • M
NULL Pointer Dereference

*
  • M
CVE-2025-14330

<0:140.6.0-1.el10_0
  • H
Use After Free

<0:140.6.0-1.el10_0
  • M
CVE-2025-14329

<0:140.6.0-1.el10_0
  • M
CVE-2025-14328

<0:140.6.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.6.0-1.el10_0
  • M
Origin Validation Error

<0:140.6.0-1.el10_0
  • H
CVE-2025-14324

<0:140.6.0-1.el10_0
  • H
CVE-2025-14323

<0:140.6.0-1.el10_0
  • H
CVE-2025-14322

<0:140.6.0-1.el10_0
  • H
CVE-2025-14323

<0:140.6.0-1.el10_1
  • M
CVE-2025-14330

<0:140.6.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.6.0-1.el10_1
  • H
CVE-2025-14322

<0:140.6.0-1.el10_1
  • M
CVE-2025-14329

<0:140.6.0-1.el10_1
  • H
CVE-2025-14324

<0:140.6.0-1.el10_1
  • M
CVE-2025-14328

<0:140.6.0-1.el10_1
  • H
Use After Free

<0:140.6.0-1.el10_1
  • M
Origin Validation Error

<0:140.6.0-1.el10_1
  • M
Improper Verification of Source of a Communication Channel

*
  • H
Cross-site Scripting (XSS)

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Out-of-bounds Read

*
  • L
Algorithmic Complexity

*
  • M
Out-of-bounds Read

*
  • L
Authentication Bypass

<0:140.5.0-2.el10_1
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_1
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_1
  • H
Race Condition

<0:140.5.0-2.el10_1
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_1
  • M
Origin Validation Error

<0:140.5.0-2.el10_1
  • H
Out-of-bounds Write

<0:140.5.0-2.el10_1
  • M
Trust Boundary Violation

<0:140.5.0-2.el10_1
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_1
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_0
  • H
Out-of-bounds Write

<0:140.5.0-2.el10_0
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_0
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_0
  • M
Trust Boundary Violation

<0:140.5.0-2.el10_0
  • L
Authentication Bypass

<0:140.5.0-2.el10_0
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_0
  • M
Origin Validation Error

<0:140.5.0-2.el10_0
  • H
Race Condition

<0:140.5.0-2.el10_0
  • L
Allocation of Resources Without Limits or Throttling

*
  • H
Out-of-bounds Write

<0:140.4.0-3.el10_0
  • H
Use After Free

<0:140.4.0-3.el10_0
  • M
Interpretation Conflict

<0:140.4.0-3.el10_0
  • H
Out-of-Bounds

<0:140.4.0-3.el10_0
  • H
Improper Access Control

<0:140.4.0-3.el10_0
  • H
Out-of-Bounds

<0:140.4.0-3.el10_0
  • H
Exposure of System Data to an Unauthorized Control Sphere

<0:140.4.0-3.el10_0
  • M
Out-of-bounds Read

<0:140.3.0-1.el10_0
  • M
Integer Overflow or Wraparound

<0:140.3.0-1.el10_0
  • M
CVE-2025-10529

<0:140.3.0-1.el10_0
  • H
Access of Uninitialized Pointer

<0:140.3.0-1.el10_0
  • H
CVE-2025-10537

<0:140.3.0-1.el10_0
  • L
CVE-2025-10536

<0:140.3.0-1.el10_0
  • H
Use After Free

<0:140.3.0-1.el10_0
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Improper Neutralization

*
  • M
Information Exposure Through Caching

*
  • M
Improper Input Validation

*
  • L
Resource Exhaustion

<0:128.14.0-2.el10_0
  • H
Information Exposure

<0:128.14.0-2.el10_0
  • H
Out-of-Bounds

<0:128.14.0-2.el10_0
  • M
Improper Initialization

<0:128.14.0-2.el10_0
  • H
Out-of-Bounds

<0:128.14.0-2.el10_0
  • L
Improper Encoding or Escaping of Output

*
  • M
Buffer Over-read

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Arbitrary Code Injection

<0:128.13.0-1.el10_0
  • M
Incorrect Default Permissions

<0:128.13.0-1.el10_0
  • M
Cross-site Scripting (XSS)

<0:128.13.0-1.el10_0
  • H
Out-of-Bounds

<0:128.13.0-1.el10_0
  • M
Protection Mechanism Failure

<0:128.13.0-1.el10_0
  • H
Use of Uninitialized Variable

<0:128.13.0-1.el10_0
  • L
NULL Pointer Dereference

<0:128.13.0-1.el10_0
  • H
Insufficient Protection Against Instruction Skipping Via Fault Injection

<0:128.13.0-1.el10_0
  • H
Out-of-Bounds

<0:128.13.0-1.el10_0
  • M
Integer Overflow or Wraparound

*
  • L
Missing Synchronization

*
  • L
NULL Pointer Dereference

*
  • L
User Interface (UI) Misrepresentation of Critical Information

*
  • L
Out-of-bounds Read

*
  • L
Double Free

*
  • L
Race Condition

*
  • L
Improper Validation of Specified Quantity in Input

*
  • L
Uncontrolled Memory Allocation

*
  • L
Improper Check for Unusual or Exceptional Conditions

*
  • L
Information Exposure

*
  • M
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Information Exposure

*
  • M
User Interface (UI) Misrepresentation of Critical Information

*
  • M
Use After Free

*
  • M
Out-of-Bounds

*
  • M
Buffer Overflow

*
  • M
Use After Free

*
  • M
Buffer Overflow

*
  • M
Out-of-Bounds

*
  • M
Use After Free

*
  • M
Open Redirect

*
  • M
Unintended Proxy or Intermediary ('Confused Deputy')

*
  • M
Out-of-Bounds

*
  • M
Improper Restriction of Rendered UI Layers or Frames

*
  • M
Access of Uninitialized Pointer

*
  • M
Missing Authentication for Critical Function

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Use After Free

*
  • H
Buffer Overflow

*
  • H
Use After Free

*
  • H
Buffer Overflow

*
  • H
Arbitrary Code Injection

*
  • H
Arbitrary Code Injection

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Improper Restriction of Rendered UI Layers or Frames

*
  • H
Buffer Overflow

*
  • M
HTTP Request Smuggling

*
  • L
HTTP Request Smuggling

*
  • M
Cross-site Scripting (XSS)

<0:128.12.0-1.el10_0
  • M
Use of Incorrectly-Resolved Name or Reference

<0:128.12.0-1.el10_0
  • M
Information Exposure

<0:128.12.0-1.el10_0
  • H
Use After Free

<0:128.12.0-1.el10_0
  • L
Improper Input Validation

*
  • L
Improper Resource Shutdown or Release

*
  • L
Use After Free

*
  • L
Reachable Assertion

*
  • H
Double Free

<0:128.11.0-1.el10_0
  • L
Improper Check for Unusual or Exceptional Conditions

*
  • L
Improper Restriction of Rendered UI Layers or Frames

*
  • M
Improper Cleanup on Thrown Exception

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Use After Free

*
  • H
Use After Free

*
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • H
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Race Condition

*
  • L
Improper Restriction of Rendered UI Layers or Frames

<0:128.11.0-1.el10_0
  • M
Inclusion of Functionality from Untrusted Control Sphere

<0:128.11.0-1.el10_0
  • M
Out-of-Bounds

<0:128.11.0-1.el10_0
  • M
Improper Encoding or Escaping of Output

<0:128.11.0-1.el10_0
  • M
Inclusion of Functionality from Untrusted Control Sphere

<0:128.11.0-1.el10_0
  • M
Out-of-Bounds

<0:128.11.0-1.el10_0
  • M
CVE-2025-48068

*
  • M
Improper Validation of Unsafe Equivalence in Input

*
  • H
Out-of-bounds Write

<0:128.10.1-1.el10_0
  • H
Out-of-bounds Write

<0:128.10.1-1.el10_0
  • L
Use After Free

*
  • L
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

*
  • L
Information Exposure

*
  • L
Product UI does not Warn User of Unsafe Actions

*
  • M
Double Free

*
  • M
User Interface (UI) Misrepresentation of Critical Information

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improper Validation of Integrity Check Value

*
  • H
Buffer Overflow

*
  • M
Incomplete Filtering of Special Elements

*
  • M
Buffer Overflow

<0:128.10.0-1.el10_0
  • M
Out-of-bounds Read

<0:128.10.0-1.el10_0
  • H
Buffer Overflow

<0:128.10.0-1.el10_0
  • H
Arbitrary Code Injection

<0:128.10.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:128.10.0-1.el10_0
  • M
Origin Validation Error

<0:128.9.0-3.el10_0
  • H
Buffer Overflow

<0:128.9.0-3.el10_0
  • H
Use After Free

<0:128.9.0-3.el10_0