Direct Vulnerabilities

Known vulnerabilities in the firefox package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Use After Free

*
  • H
Use After Free

*
  • H
Information Exposure

*
  • H
Use After Free

*
  • H
Use of Uninitialized Variable

*
  • L
Information Exposure

*
  • L
User Interface (UI) Misrepresentation of Critical Information

*
  • H
Use After Free

*
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Out-of-Bounds

*
  • M
Origin Validation Error

*
  • M
Out-of-Bounds

*
  • H
Access of Uninitialized Pointer

*
  • M
Improper Privilege Management

*
  • M
Improper Privilege Management

*
  • M
Origin Validation Error

*
  • H
Reliance on Undefined

*
  • H
Use After Free

*
  • H
Protection Mechanism Failure

*
  • H
Use of Uninitialized Resource

*
  • H
Use After Free

*
  • H
Use After Free

*
  • H
Out-of-Bounds

*
  • H
Improper Access Control

*
  • H
Use After Free

*
  • H
Use After Free

*
  • H
Use After Free

*
  • H
Out-of-Bounds

*
  • H
Use After Free

*
  • H
Out-of-Bounds

*
  • H
Use After Free

*
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.16.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_0
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.16.0-1.el10_0
  • M
Exposure of System Data to an Unauthorized Control Sphere

<0:140.16.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.16.0-1.el10_0
  • H
Incomplete Filtering of Special Elements

<0:140.16.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:140.16.0-1.el10_0
  • H
Reliance on Untrusted Inputs in a Security Decision

<0:140.16.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.16.0-1.el10_0
  • M
NULL Pointer Dereference

<0:140.16.0-1.el10_0
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Insufficient Compartmentalization

*
  • H
Expired Pointer Dereference

*
  • M
Unchecked Input for Loop Condition

*
  • H
Expired Pointer Dereference

*
  • H
Out-of-bounds Read

*
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.15.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.15.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:140.15.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.15.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_0
  • M
Expired Pointer Dereference

*
  • H
Expired Pointer Dereference

*
  • H
Expired Pointer Dereference

*
  • H
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • H
Expired Pointer Dereference

*
  • H
Expired Pointer Dereference

*
  • H
Expired Pointer Dereference

*
  • L
Information Exposure Through Caching

*
  • M
Integer Overflow or Wraparound

*
  • L
Server-Side Request Forgery (SSRF)

*
  • M
Origin Validation Error

*
  • M
Use of Multiple Resources with Duplicate Identifier

*
  • M
Use of Multiple Resources with Duplicate Identifier

*
  • M
Origin Validation Error

*
  • M
Resource Exhaustion

*
  • L
Information Exposure Through Caching

*
  • H
Expired Pointer Dereference

*
  • H
Expired Pointer Dereference

*
  • H
Out-of-bounds Read

*
  • M
Integer Overflow or Wraparound

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • H
Missing Release of Resource after Effective Lifetime

*
  • H
Improper Validation of Specified Index, Position, or Offset in Input

*
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.15.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.15.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.15.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.15.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.15.0-1.el10_2
  • H
Improper Handling of Unicode Encoding

*
  • M
Improper Validation of Specified Quantity in Input

*
  • H
Out-of-bounds Read

*
  • H
Out-of-bounds Read

*
  • L
Improper Validation of Unsafe Equivalence in Input

*
  • M
Improper Certificate Validation

*
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.16.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.16.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_2
  • M
NULL Pointer Dereference

<0:140.16.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.16.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.16.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_2
  • M
Exposure of System Data to an Unauthorized Control Sphere

<0:140.16.0-1.el10_2
  • H
Reliance on Untrusted Inputs in a Security Decision

<0:140.16.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_2
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.16.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.16.0-1.el10_2
  • H
Incomplete Filtering of Special Elements

<0:140.16.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.16.0-1.el10_2
  • L
Improper Validation of Integrity Check Value

*
  • H
Algorithmic Complexity

*
  • L
Algorithmic Complexity

*
  • M
Cross-site Scripting (XSS)

*
  • M
Information Exposure Through Caching

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • L
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.14.0-1.el10_0
  • L
Reliance on Untrusted Inputs in a Security Decision

<0:140.14.0-1.el10_0
  • M
Integer Overflow or Wraparound

<0:140.14.0-1.el10_0
  • M
Trust of System Event Data

<0:140.14.0-1.el10_0
  • M
Improper Verification of Source of a Communication Channel

<0:140.14.0-1.el10_0
  • M
Origin Validation Error

<0:140.14.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.14.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.14.0-1.el10_0
  • M
Origin Validation Error

<0:140.14.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.14.0-1.el10_0
  • M
Information Exposure

<0:140.14.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.14.0-1.el10_0
  • M
External Control of Assumed-Immutable Web Parameter

<0:140.14.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.14.0-1.el10_0
  • M
Trust Boundary Violation

<0:140.14.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.14.0-1.el10_0
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.14.0-1.el10_0
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.14.0-1.el10_0
  • M
Insufficient Isolation of System-Dependent Functions

<0:140.14.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.14.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.14.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.14.0-1.el10_0
  • H
Information Exposure

<0:140.14.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.14.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.14.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.14.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.14.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:140.14.0-1.el10_0
  • H
Exposure of System Data to an Unauthorized Control Sphere

<0:140.14.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.14.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.14.0-1.el10_0
  • M
Out-of-bounds Write

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Incorrect Calculation of Buffer Size

*
  • M
Improper Validation of Consistency within Input

*
  • M
Expired Pointer Dereference

*
  • L
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.14.0-1.el10_2
  • L
Reliance on Untrusted Inputs in a Security Decision

<0:140.14.0-1.el10_2
  • M
Origin Validation Error

<0:140.14.0-1.el10_2
  • M
Improper Verification of Source of a Communication Channel

<0:140.14.0-1.el10_2
  • M
Trust Boundary Violation

<0:140.14.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.14.0-1.el10_2
  • M
Insufficient Isolation of System-Dependent Functions

<0:140.14.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.14.0-1.el10_2
  • H
Information Exposure

<0:140.14.0-1.el10_2
  • M
Trust of System Event Data

<0:140.14.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.14.0-1.el10_2
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.14.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.14.0-1.el10_2
  • H
Exposure of System Data to an Unauthorized Control Sphere

<0:140.14.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.14.0-1.el10_2
  • M
Integer Overflow or Wraparound

<0:140.14.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.14.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.14.0-1.el10_2
  • M
Information Exposure

<0:140.14.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.14.0-1.el10_2
  • M
External Control of Assumed-Immutable Web Parameter

<0:140.14.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.14.0-1.el10_2
  • M
Origin Validation Error

<0:140.14.0-1.el10_2
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.14.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.14.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.14.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.14.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.14.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.14.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.14.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.14.0-1.el10_2
  • M
NULL Pointer Dereference

*
  • H
Heap-based Buffer Overflow

<0:140.13.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_0
  • L
Information Exposure

<0:140.13.0-1.el10_0
  • M
Race Condition

<0:140.13.0-1.el10_0
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.13.0-1.el10_0
  • M
NULL Pointer Dereference

<0:140.13.0-1.el10_0
  • M
Origin Validation Error

<0:140.13.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.13.0-1.el10_0
  • M
Cleartext Storage of Sensitive Information

<0:140.13.0-1.el10_0
  • M
Information Exposure

<0:140.13.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.13.0-1.el10_0
  • M
Information Exposure

<0:140.13.0-1.el10_0
  • M
Improperly Implemented Security Check for Standard

<0:140.13.0-1.el10_0
  • M
Trust Boundary Violation

<0:140.13.0-1.el10_0
  • M
Buffer Overflow

<0:140.13.0-1.el10_0
  • M
Insufficient Granularity of Access Control

<0:140.13.0-1.el10_0
  • M
Buffer Access with Incorrect Length Value

<0:140.13.0-1.el10_0
  • H
Origin Validation Error

<0:140.13.0-1.el10_0
  • M
Insufficient Compartmentalization

<0:140.13.0-1.el10_0
  • M
Integer Overflow or Wraparound

<0:140.13.0-1.el10_0
  • M
Insufficient Compartmentalization

<0:140.13.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.13.0-1.el10_0
  • M
NULL Pointer Dereference

<0:140.13.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.13.0-1.el10_0
  • H
Buffer Overflow

<0:140.13.0-1.el10_0
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.13.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_0
  • H
Missing Release of Resource after Effective Lifetime

<0:140.13.0-1.el10_0
  • H
Trust Boundary Violation

<0:140.13.0-1.el10_0
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.13.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.13.0-1.el10_0
  • M
Out-of-bounds Read

*
  • M
Directory Traversal

*
  • M
Use After Free

*
  • M
Improper Validation of Unsafe Equivalence in Input

<0:140.3.0-1.el10_0
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
Information Exposure

*
  • M
Buffer Overflow

<0:140.13.0-1.el10_2
  • M
Insufficient Compartmentalization

<0:140.13.0-1.el10_2
  • M
Origin Validation Error

<0:140.13.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.13.0-1.el10_2
  • M
Buffer Access with Incorrect Length Value

<0:140.13.0-1.el10_2
  • L
Information Exposure

<0:140.13.0-1.el10_2
  • M
Insufficient Compartmentalization

<0:140.13.0-1.el10_2
  • M
Insufficient Granularity of Access Control

<0:140.13.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.13.0-1.el10_2
  • M
Improperly Implemented Security Check for Standard

<0:140.13.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.13.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_2
  • M
Trust Boundary Violation

<0:140.13.0-1.el10_2
  • M
Cleartext Storage of Sensitive Information

<0:140.13.0-1.el10_2
  • M
NULL Pointer Dereference

<0:140.13.0-1.el10_2
  • M
Integer Overflow or Wraparound

<0:140.13.0-1.el10_2
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.13.0-1.el10_2
  • M
NULL Pointer Dereference

<0:140.13.0-1.el10_2
  • M
Information Exposure

<0:140.13.0-1.el10_2
  • M
Information Exposure

<0:140.13.0-1.el10_2
  • L
Information Exposure Through Caching

*
  • H
Out-of-bounds Write

<0:140.13.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_2
  • H
Buffer Overflow

<0:140.13.0-1.el10_2
  • M
Race Condition

<0:140.13.0-1.el10_2
  • H
Trust Boundary Violation

<0:140.13.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.13.0-1.el10_2
  • H
Missing Release of Resource after Effective Lifetime

<0:140.13.0-1.el10_2
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.13.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_2
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.13.0-1.el10_2
  • H
Origin Validation Error

<0:140.13.0-1.el10_2
  • H
Buffer Access with Incorrect Length Value

<0:140.10.1-1.el10_2
  • M
Directory Traversal

*
  • M
Buffer Overflow

*
  • H
Buffer Access with Incorrect Length Value

<0:140.10.1-1.el10_0
  • M
File Descriptor Leak

<0:140.12.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.12.0-1.el10_0
  • L
Improper Validation of Syntactic Correctness of Input

<0:140.12.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_0
  • L
Incorrect Calculation of Buffer Size

<0:140.12.0-1.el10_0
  • M
Origin Validation Error

<0:140.12.0-1.el10_0
  • M
CVE-2026-12302

<0:140.12.0-1.el10_0
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.12.0-1.el10_0
  • M
CVE-2026-12308

<0:140.12.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.12.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:140.12.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:140.12.0-1.el10_0
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.12.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.12.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • H
File Descriptor Leak

<0:140.12.0-1.el10_0
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.12.0-1.el10_0
  • H
CVE-2026-12329

<0:140.12.0-1.el10_0
  • M
Incorrect Calculation of Buffer Size

<0:140.12.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • M
Creation of chroot Jail Without Changing Working Directory

<0:140.12.0-1.el10_0
  • H
Use of Out-of-range Pointer Offset

<0:140.12.0-1.el10_0
  • H
Arbitrary Code Injection

<0:140.6.0-1.el10_0
  • L
External Control of Assumed-Immutable Web Parameter

<0:140.11.0-1.el10_0
  • M
CVE-2026-8950

<0:140.11.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.11.0-1.el10_0
  • M
File Descriptor Leak

<0:140.11.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.11.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.11.0-1.el10_0
  • L
Incorrect Privilege Assignment

<0:140.11.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.11.0-1.el10_0
  • M
Integer Overflow or Wraparound

<0:140.11.0-1.el10_0
  • L
CVE-2026-8968

<0:140.11.0-1.el10_0
  • L
Improperly Implemented Security Check for Standard

<0:140.11.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.11.0-1.el10_0
  • M
Integer Overflow or Wraparound

<0:140.11.0-1.el10_0
  • H
Undefined Behavior for Input to API

<0:140.11.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:140.11.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • H
CVE-2026-12329

<0:140.12.0-1.el10_2
  • M
Incorrect Calculation of Buffer Size

<0:140.12.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • M
Creation of chroot Jail Without Changing Working Directory

<0:140.12.0-1.el10_2
  • L
Incorrect Calculation of Buffer Size

<0:140.12.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.12.0-1.el10_2
  • H
Use of Out-of-range Pointer Offset

<0:140.12.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.12.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • M
Origin Validation Error

<0:140.12.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.12.0-1.el10_2
  • H
File Descriptor Leak

<0:140.12.0-1.el10_2
  • M
File Descriptor Leak

<0:140.12.0-1.el10_2
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.12.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.12.0-1.el10_2
  • M
CVE-2026-12308

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • L
Improper Validation of Syntactic Correctness of Input

<0:140.12.0-1.el10_2
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.12.0-1.el10_2
  • M
CVE-2026-12302

<0:140.12.0-1.el10_2
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.12.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Read

*
  • H
Heap-based Buffer Overflow

*
  • M
Uncontrolled Recursion

*
  • H
Out-of-bounds Write

<0:140.10.2-1.el10_0
  • H
Expired Pointer Dereference

<0:140.10.2-1.el10_0
  • H
CVE-2026-8094

<0:140.10.2-1.el10_0
  • M
Cross-site Scripting (XSS)

*
  • L
Improper Validation of Integrity Check Value

*
  • M
Trust Boundary Violation

<0:140.10.1-1.el10_0
  • H
Out-of-bounds Read

<0:140.10.1-1.el10_0
  • H
CVE-2026-7323

<0:140.10.1-1.el10_0
  • H
Out-of-bounds Write

<0:140.10.1-1.el10_0
  • M
HTTP Request Smuggling

*
  • L
Incorrect Privilege Assignment

<0:140.11.0-1.el10_2
  • L
External Control of Assumed-Immutable Web Parameter

<0:140.11.0-1.el10_2
  • L
CVE-2026-8968

<0:140.11.0-1.el10_2
  • L
Improperly Implemented Security Check for Standard

<0:140.11.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.11.0-1.el10_2
  • M
CVE-2026-8950

<0:140.11.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • M
File Descriptor Leak

<0:140.11.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.11.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.11.0-1.el10_2
  • M
Integer Overflow or Wraparound

<0:140.11.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.11.0-1.el10_2
  • H
Undefined Behavior for Input to API

<0:140.11.0-1.el10_2
  • M
Integer Overflow or Wraparound

<0:140.11.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.11.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • M
HTTP Request Smuggling

*
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • L
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_2
  • M
Expected Behavior Violation

<0:140.10.0-1.el10_2
  • M
Improper Handling of File Names

<0:140.10.0-1.el10_2
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.10.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • M
Trust Boundary Violation

<0:140.10.1-1.el10_2
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_2
  • M
Improperly Implemented Security Check for Standard

<0:140.10.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_2
  • M
Buffer Access with Incorrect Length Value

<0:140.10.0-1.el10_2
  • M
Out-of-bounds Read

<0:140.10.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • M
Use of Potentially Dangerous Function

<0:140.10.0-1.el10_2
  • M
Improper Restriction of Rendered UI Layers or Frames

<0:140.10.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • H
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_2
  • M
Use of Out-of-range Pointer Offset

<0:140.10.0-1.el10_2
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.10.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • H
Out-of-bounds Read

<0:140.10.1-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.1-1.el10_2
  • H
CVE-2026-7323

<0:140.10.1-1.el10_2
  • H
CVE-2026-8094

<0:140.10.2-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.2-1.el10_2
  • H
Expired Pointer Dereference

<0:140.10.2-1.el10_2
  • M
Expired Pointer Dereference

<0:140.10.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_0
  • M
Out-of-bounds Read

<0:140.10.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_0
  • H
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_0
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_0
  • M
Use of Potentially Dangerous Function

<0:140.10.0-1.el10_0
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.10.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_0
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_0
  • M
Improper Restriction of Rendered UI Layers or Frames

<0:140.10.0-1.el10_0
  • M
Improper Handling of File Names

<0:140.10.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.10.0-1.el10_0
  • L
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_0
  • M
Use of Out-of-range Pointer Offset

<0:140.10.0-1.el10_0
  • M
Improperly Implemented Security Check for Standard

<0:140.10.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_0
  • M
Expected Behavior Violation

<0:140.10.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.10.0-1.el10_0
  • M
Buffer Access with Incorrect Length Value

<0:140.10.0-1.el10_0
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_0
  • M
Out-of-bounds Write

*
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_0
  • H
Integer Overflow or Wraparound

<0:140.9.1-1.el10_0
  • M
Expired Pointer Dereference

<0:140.9.1-1.el10_0
  • M
Buffer Underflow

<0:140.9.1-1.el10_0
  • L
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_1
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.10.0-1.el10_1
  • M
Expected Behavior Violation

<0:140.10.0-1.el10_1
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_1
  • M
Buffer Access with Incorrect Length Value

<0:140.10.0-1.el10_1
  • M
Improper Handling of File Names

<0:140.10.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_1
  • M
Improperly Implemented Security Check for Standard

<0:140.10.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.10.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_1
  • M
Improper Restriction of Rendered UI Layers or Frames

<0:140.10.0-1.el10_1
  • H
Incorrect Privilege Assignment

<0:140.10.0-1.el10_1
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_1
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_1
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_1
  • M
Expired Pointer Dereference

<0:140.10.0-1.el10_1
  • M
Use of Out-of-range Pointer Offset

<0:140.10.0-1.el10_1
  • M
Use of Potentially Dangerous Function

<0:140.10.0-1.el10_1
  • M
Out-of-bounds Read

<0:140.10.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_1
  • H
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_1
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_1
  • M
Cross-site Scripting (XSS)

*
  • L
Out-of-bounds Write

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Integer Overflow or Wraparound

*
  • H
Insufficient Compartmentalization

<0:140.9.0-1.el10_0
  • L
Buffer Access with Incorrect Length Value

<0:140.9.0-1.el10_0
  • L
Undefined Behavior for Input to API

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.9.0-1.el10_0
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • M
Undefined Behavior for Input to API

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Read

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Allocation of Resources Without Limits or Throttling

<0:140.9.0-1.el10_0
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • H
Trust Boundary Violation

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.9.0-1.el10_0
  • H
Race Condition

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_0
  • H
HTTP Request Smuggling

<0:140.9.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_0
  • M
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.9.1-1.el10_1
  • H
Incorrect Calculation of Buffer Size

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • H
Buffer Overflow

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • H
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_0
  • M
Buffer Underflow

<0:140.9.1-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.1-1.el10_1
  • M
Expired Pointer Dereference

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Arbitrary Code Injection

*
  • M
Buffer Access with Incorrect Length Value

*
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
HTTP Request Smuggling

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Incorrect Calculation of Buffer Size

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • L
Buffer Access with Incorrect Length Value

<0:140.9.0-1.el10_1
  • L
Undefined Behavior for Input to API

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Read

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.9.0-1.el10_1
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_1
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_1
  • M
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_1
  • H
Buffer Overflow

<0:140.9.0-1.el10_1
  • M
Undefined Behavior for Input to API

<0:140.9.0-1.el10_1
  • M
Incorrect Privilege Assignment

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Insufficient Compartmentalization

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • M
Allocation of Resources Without Limits or Throttling

<0:140.9.0-1.el10_1
  • H
Trust Boundary Violation

<0:140.9.0-1.el10_1
  • H
Race Condition

<0:140.9.0-1.el10_1
  • L
CVE-2026-2791

<0:140.8.0-2.el10_0
  • M
Use After Free

<0:140.8.0-2.el10_0
  • L
CVE-2026-2790

<0:140.8.0-2.el10_0
  • M
Access of Uninitialized Pointer

<0:140.8.0-2.el10_0
  • M
Use After Free

<0:140.8.0-2.el10_0
  • M
Use After Free

<0:140.8.0-2.el10_0
  • M
CVE-2026-2788

<0:140.8.0-2.el10_0
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.8.0-2.el10_0
  • M
CVE-2026-2784

<0:140.8.0-2.el10_0
  • M
CVE-2026-2782

<0:140.8.0-2.el10_0
  • H
CVE-2026-2775

<0:140.8.0-2.el10_0
  • M
Integer Overflow or Wraparound

<0:140.8.0-2.el10_0
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_0
  • H
CVE-2026-2777

<0:140.8.0-2.el10_0
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_0
  • M
CVE-2026-2779

<0:140.8.0-2.el10_0
  • H
CVE-2026-2776

<0:140.8.0-2.el10_0
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2778

<0:140.8.0-2.el10_0
  • M
CVE-2026-2780

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2771

<0:140.8.0-2.el10_0
  • H
CVE-2026-2768

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2769

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_0
  • H
CVE-2026-2760

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2773

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2759

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2757

<0:140.8.0-2.el10_0
  • H
CVE-2026-2761

<0:140.8.0-2.el10_0
  • H
CVE-2026-2447

<0:140.8.0-2.el10_0
  • M
Out-of-bounds Read

*
  • M
Unchecked Input for Loop Condition

*
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_1
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_1
  • L
CVE-2026-2791

<0:140.8.0-2.el10_1
  • L
CVE-2026-2790

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
CVE-2026-2782

<0:140.8.0-2.el10_1
  • M
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • M
CVE-2026-2788

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
CVE-2026-2784

<0:140.8.0-2.el10_1
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.8.0-2.el10_1
  • M
Access of Uninitialized Pointer

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
CVE-2026-2779

<0:140.8.0-2.el10_1
  • H
CVE-2026-2778

<0:140.8.0-2.el10_1
  • H
CVE-2026-2776

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2775

<0:140.8.0-2.el10_1
  • H
CVE-2026-2777

<0:140.8.0-2.el10_1
  • H
CVE-2026-2773

<0:140.8.0-2.el10_1
  • H
CVE-2026-2769

<0:140.8.0-2.el10_1
  • M
CVE-2026-2780

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2768

<0:140.8.0-2.el10_1
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2771

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2760

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • H
CVE-2026-2761

<0:140.8.0-2.el10_1
  • H
CVE-2026-2759

<0:140.8.0-2.el10_1
  • H
CVE-2026-2757

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2447

<0:140.8.0-2.el10_1
  • M
Incorrect Behavior Order: Early Validation

*
  • L
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Authentication Bypass

<0:140.7.0-1.el10_1
  • L
Authentication Bypass

<0:140.7.0-1.el10_0
  • M
Out-of-Bounds

<0:140.7.0-1.el10_1
  • M
Out-of-Bounds

<0:140.7.0-1.el10_0
  • M
Use After Free

<0:140.7.0-1.el10_1
  • M
Use After Free

<0:140.7.0-1.el10_0
  • M
Information Exposure

<0:140.7.0-1.el10_1
  • M
Information Exposure

<0:140.7.0-1.el10_0
  • M
Exposure of System Data to an Unauthorized Control Sphere

<0:140.7.0-1.el10_1
  • M
Exposure of System Data to an Unauthorized Control Sphere

<0:140.7.0-1.el10_0
  • M
Authentication Bypass

<0:140.7.0-1.el10_1
  • M
Use After Free

<0:140.7.0-1.el10_1
  • M
Authentication Bypass

<0:140.7.0-1.el10_0
  • M
Use After Free

<0:140.7.0-1.el10_0
  • H
Protection Mechanism Failure

<0:140.7.0-1.el10_1
  • H
Protection Mechanism Failure

<0:140.7.0-1.el10_0
  • H
Use After Free

<0:140.7.0-1.el10_1
  • H
Use After Free

<0:140.7.0-1.el10_0
  • H
Out-of-Bounds

<0:140.7.0-1.el10_1
  • H
Out-of-Bounds

<0:140.7.0-1.el10_1
  • H
Out-of-Bounds

<0:140.7.0-1.el10_0
  • H
Out-of-Bounds

<0:140.7.0-1.el10_0
  • H
Integer Overflow or Wraparound

<0:140.7.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.7.0-1.el10_0
  • H
Out-of-Bounds

<0:140.7.0-1.el10_1
  • H
Out-of-Bounds

<0:140.7.0-1.el10_0
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Buffer Overflow

*
  • M
Deserialization of Untrusted Data

*
  • M
Improper Input Validation

*
  • M
CRLF Injection

*
  • M
CRLF Injection

*
  • M
Arbitrary Code Injection

*
  • M
Improper Neutralization

*
  • M
NULL Pointer Dereference

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.6.0-1.el10_0
  • H
Use After Free

<0:140.6.0-1.el10_0
  • M
Arbitrary Command Injection

<0:140.6.0-1.el10_0
  • M
OS Command Injection

<0:140.6.0-1.el10_0
  • M
Out-of-Bounds

<0:140.6.0-1.el10_0
  • M
Origin Validation Error

<0:140.6.0-1.el10_0
  • H
Arbitrary Code Injection

<0:140.6.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.6.0-1.el10_0
  • H
Improper Check for Unusual or Exceptional Conditions

<0:140.6.0-1.el10_0
  • H
Arbitrary Code Injection

<0:140.6.0-1.el10_1
  • H
Incorrect Privilege Assignment

<0:140.6.0-1.el10_1
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.6.0-1.el10_1
  • M
Out-of-Bounds

<0:140.6.0-1.el10_1
  • H
Improper Check for Unusual or Exceptional Conditions

<0:140.6.0-1.el10_1
  • M
Arbitrary Command Injection

<0:140.6.0-1.el10_1
  • H
Arbitrary Code Injection

<0:140.6.0-1.el10_1
  • M
OS Command Injection

<0:140.6.0-1.el10_1
  • H
Use After Free

<0:140.6.0-1.el10_1
  • M
Origin Validation Error

<0:140.6.0-1.el10_1
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Out-of-bounds Read

*
  • L
Algorithmic Complexity

*
  • M
Out-of-bounds Read

*
  • L
Authentication Bypass

<0:140.5.0-2.el10_1
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_1
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_1
  • H
Race Condition

<0:140.5.0-2.el10_1
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_1
  • M
Origin Validation Error

<0:140.5.0-2.el10_1
  • H
Out-of-bounds Write

<0:140.5.0-2.el10_1
  • M
Trust Boundary Violation

<0:140.5.0-2.el10_1
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_1
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_0
  • H
Out-of-bounds Write

<0:140.5.0-2.el10_0
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_0
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_0
  • M
Trust Boundary Violation

<0:140.5.0-2.el10_0
  • L
Authentication Bypass

<0:140.5.0-2.el10_0
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_0
  • M
Origin Validation Error

<0:140.5.0-2.el10_0
  • H
Race Condition

<0:140.5.0-2.el10_0
  • L
Allocation of Resources Without Limits or Throttling

*
  • H
Out-of-bounds Write

<0:140.4.0-3.el10_0
  • H
Use After Free

<0:140.4.0-3.el10_0
  • M
Interpretation Conflict

<0:140.4.0-3.el10_0
  • H
Out-of-Bounds

<0:140.4.0-3.el10_0
  • H
Improper Access Control

<0:140.4.0-3.el10_0
  • H
Out-of-Bounds

<0:140.4.0-3.el10_0
  • H
Exposure of System Data to an Unauthorized Control Sphere

<0:140.4.0-3.el10_0
  • M
Out-of-bounds Read

<0:140.3.0-1.el10_0
  • M
Integer Overflow or Wraparound

<0:140.3.0-1.el10_0
  • M
Overly Permissive Cross-domain Whitelist

<0:140.3.0-1.el10_0
  • H
Access of Uninitialized Pointer

<0:140.3.0-1.el10_0
  • H
Out-of-Bounds

<0:140.3.0-1.el10_0
  • L
Information Exposure

<0:140.3.0-1.el10_0
  • H
Use After Free

<0:140.3.0-1.el10_0
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Improper Neutralization

*
  • M
Information Exposure Through Caching

*
  • M
Improper Input Validation

*
  • L
Resource Exhaustion

<0:128.14.0-2.el10_0
  • H
Information Exposure

<0:128.14.0-2.el10_0
  • H
Out-of-Bounds

<0:128.14.0-2.el10_0
  • M
Improper Initialization

<0:128.14.0-2.el10_0
  • H
Out-of-Bounds

<0:128.14.0-2.el10_0
  • L
Improper Encoding or Escaping of Output

*
  • M
Buffer Over-read

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Arbitrary Code Injection

<0:128.13.0-1.el10_0
  • M
Incorrect Default Permissions

<0:128.13.0-1.el10_0
  • M
Cross-site Scripting (XSS)

<0:128.13.0-1.el10_0
  • H
Out-of-Bounds

<0:128.13.0-1.el10_0
  • M
Protection Mechanism Failure

<0:128.13.0-1.el10_0
  • H
Use of Uninitialized Variable

<0:128.13.0-1.el10_0
  • L
NULL Pointer Dereference

<0:128.13.0-1.el10_0
  • H
Insufficient Protection Against Instruction Skipping Via Fault Injection

<0:128.13.0-1.el10_0
  • H
Out-of-Bounds

<0:128.13.0-1.el10_0
  • L
Race Condition

*
  • L
Improper Validation of Specified Quantity in Input

*
  • L
Uncontrolled Memory Allocation

*
  • L
Improper Check for Unusual or Exceptional Conditions

*
  • L
Information Exposure

*
  • M
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Information Exposure

*
  • M
User Interface (UI) Misrepresentation of Critical Information

*
  • M
Use After Free

*
  • M
Out-of-Bounds

*
  • M
Buffer Overflow

*
  • M
Use After Free

*
  • M
Buffer Overflow

*
  • M
Out-of-Bounds

*
  • M
Use After Free

*
  • M
Open Redirect

*
  • M
Unintended Proxy or Intermediary ('Confused Deputy')

*
  • M
Out-of-Bounds

*
  • M
Improper Restriction of Rendered UI Layers or Frames

*
  • M
Access of Uninitialized Pointer

*
  • M
Missing Authentication for Critical Function

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Use After Free

*
  • H
Use After Free

*
  • H
Arbitrary Code Injection

*
  • H
Arbitrary Code Injection

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Improper Restriction of Rendered UI Layers or Frames

*
  • H
Buffer Overflow

*
  • M
HTTP Request Smuggling

*
  • L
HTTP Request Smuggling

*
  • M
Cross-site Scripting (XSS)

<0:128.12.0-1.el10_0
  • M
Use of Incorrectly-Resolved Name or Reference

<0:128.12.0-1.el10_0
  • M
Information Exposure

<0:128.12.0-1.el10_0
  • H
Use After Free

<0:128.12.0-1.el10_0
  • L
Improper Input Validation

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • L
Expired Pointer Dereference

*
  • L
Reachable Assertion

*
  • H
Double Free

<0:128.11.0-1.el10_0
  • L
Improper Check for Unusual or Exceptional Conditions

*
  • L
Improper Restriction of Rendered UI Layers or Frames

*
  • M
Improper Cleanup on Thrown Exception

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Use After Free

*
  • H
Use After Free

*
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • H
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Race Condition

*
  • L
Improper Restriction of Rendered UI Layers or Frames

<0:128.11.0-1.el10_0
  • M
Inclusion of Functionality from Untrusted Control Sphere

<0:128.11.0-1.el10_0
  • M
Out-of-Bounds

<0:128.11.0-1.el10_0
  • M
Improper Encoding or Escaping of Output

<0:128.11.0-1.el10_0
  • M
Inclusion of Functionality from Untrusted Control Sphere

<0:128.11.0-1.el10_0
  • M
Out-of-Bounds

<0:128.11.0-1.el10_0
  • M
CVE-2025-48068

*
  • H
Out-of-bounds Write

<0:128.10.1-1.el10_0
  • H
Out-of-bounds Write

<0:128.10.1-1.el10_0
  • L
Use After Free

*
  • M
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

*
  • L
Information Exposure

*
  • L
Product UI does not Warn User of Unsafe Actions

*
  • M
Double Free

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improper Validation of Integrity Check Value

*
  • H
Buffer Overflow

*
  • M
Incomplete Filtering of Special Elements

*
  • M
Buffer Overflow

<0:128.10.0-1.el10_0
  • M
Out-of-bounds Read

<0:128.10.0-1.el10_0
  • H
Buffer Overflow

<0:128.10.0-1.el10_0
  • H
Arbitrary Code Injection

<0:128.10.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:128.10.0-1.el10_0
  • M
Origin Validation Error

<0:128.9.0-3.el10_0
  • H
Buffer Overflow

<0:128.9.0-3.el10_0
  • H
Use After Free

<0:128.9.0-3.el10_0