Homepage

firefox

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the firefox package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Use of Predictable Algorithm in Random Number Generator

*
  • H
Heap-based Buffer Overflow

<0:140.13.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_0
  • L
Information Exposure

<0:140.13.0-1.el10_0
  • M
Race Condition

<0:140.13.0-1.el10_0
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.13.0-1.el10_0
  • M
NULL Pointer Dereference

<0:140.13.0-1.el10_0
  • M
Origin Validation Error

<0:140.13.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.13.0-1.el10_0
  • M
Cleartext Storage of Sensitive Information

<0:140.13.0-1.el10_0
  • M
Information Exposure

<0:140.13.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.13.0-1.el10_0
  • M
Information Exposure

<0:140.13.0-1.el10_0
  • M
Improperly Implemented Security Check for Standard

<0:140.13.0-1.el10_0
  • M
Trust Boundary Violation

<0:140.13.0-1.el10_0
  • M
Buffer Overflow

<0:140.13.0-1.el10_0
  • M
Insufficient Granularity of Access Control

<0:140.13.0-1.el10_0
  • M
Buffer Access with Incorrect Length Value

<0:140.13.0-1.el10_0
  • H
Origin Validation Error

<0:140.13.0-1.el10_0
  • M
Insufficient Compartmentalization

<0:140.13.0-1.el10_0
  • M
Integer Overflow or Wraparound

<0:140.13.0-1.el10_0
  • M
Insufficient Compartmentalization

<0:140.13.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.13.0-1.el10_0
  • M
NULL Pointer Dereference

<0:140.13.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.13.0-1.el10_0
  • H
Buffer Overflow

<0:140.13.0-1.el10_0
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.13.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_0
  • H
Missing Release of Resource after Effective Lifetime

<0:140.13.0-1.el10_0
  • H
Trust Boundary Violation

<0:140.13.0-1.el10_0
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.13.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.13.0-1.el10_0
  • M
Out-of-bounds Read

*
  • H
CRLF Injection

*
  • H
Directory Traversal

*
  • H
Cross-site Scripting (XSS)

*
  • H
Use of Multiple Resources with Duplicate Identifier

*
  • M
Use After Free

*
  • M
Improper Validation of Unsafe Equivalence in Input

<0:140.3.0-1.el10_0
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
Information Exposure

*
  • M
Buffer Overflow

<0:140.13.0-1.el10_2
  • M
Insufficient Compartmentalization

<0:140.13.0-1.el10_2
  • M
Origin Validation Error

<0:140.13.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.13.0-1.el10_2
  • M
Buffer Access with Incorrect Length Value

<0:140.13.0-1.el10_2
  • L
Information Exposure

<0:140.13.0-1.el10_2
  • M
Insufficient Compartmentalization

<0:140.13.0-1.el10_2
  • M
Insufficient Granularity of Access Control

<0:140.13.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.13.0-1.el10_2
  • M
Improperly Implemented Security Check for Standard

<0:140.13.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.13.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_2
  • M
Trust Boundary Violation

<0:140.13.0-1.el10_2
  • M
Cleartext Storage of Sensitive Information

<0:140.13.0-1.el10_2
  • M
NULL Pointer Dereference

<0:140.13.0-1.el10_2
  • M
Integer Overflow or Wraparound

<0:140.13.0-1.el10_2
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.13.0-1.el10_2
  • M
NULL Pointer Dereference

<0:140.13.0-1.el10_2
  • M
Information Exposure

<0:140.13.0-1.el10_2
  • M
Information Exposure

<0:140.13.0-1.el10_2
  • L
Information Exposure Through Caching

*
  • H
Out-of-bounds Write

<0:140.13.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_2
  • H
Buffer Overflow

<0:140.13.0-1.el10_2
  • M
Race Condition

<0:140.13.0-1.el10_2
  • H
Reliance on Untrusted Inputs in a Security Decision

*
  • H
Trust Boundary Violation

<0:140.13.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.13.0-1.el10_2
  • H
Missing Release of Resource after Effective Lifetime

<0:140.13.0-1.el10_2
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.13.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.13.0-1.el10_2
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.13.0-1.el10_2
  • H
Origin Validation Error

<0:140.13.0-1.el10_2
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Directory Traversal

*
  • H
Information Exposure Through Caching

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Server-Side Request Forgery (SSRF)

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Server-Side Request Forgery (SSRF)

*
  • H
Buffer Access with Incorrect Length Value

<0:140.10.1-1.el10_2
  • M
Directory Traversal

*
  • M
Buffer Overflow

*
  • H
Buffer Access with Incorrect Length Value

<0:140.10.1-1.el10_0
  • M
File Descriptor Leak

<0:140.12.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.12.0-1.el10_0
  • L
Improper Validation of Syntactic Correctness of Input

<0:140.12.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_0
  • L
Incorrect Calculation of Buffer Size

<0:140.12.0-1.el10_0
  • M
Origin Validation Error

<0:140.12.0-1.el10_0
  • M
CVE-2026-12302

<0:140.12.0-1.el10_0
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.12.0-1.el10_0
  • M
CVE-2026-12308

<0:140.12.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.12.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:140.12.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:140.12.0-1.el10_0
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.12.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.12.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • H
File Descriptor Leak

<0:140.12.0-1.el10_0
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.12.0-1.el10_0
  • H
CVE-2026-12329

<0:140.12.0-1.el10_0
  • M
Incorrect Calculation of Buffer Size

<0:140.12.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_0
  • M
Creation of chroot Jail Without Changing Working Directory

<0:140.12.0-1.el10_0
  • H
Use of Out-of-range Pointer Offset

<0:140.12.0-1.el10_0
  • H
Arbitrary Code Injection

<0:140.6.0-1.el10_0
  • L
External Control of Assumed-Immutable Web Parameter

<0:140.11.0-1.el10_0
  • M
CVE-2026-8950

<0:140.11.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.11.0-1.el10_0
  • M
File Descriptor Leak

<0:140.11.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.11.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.11.0-1.el10_0
  • L
Incorrect Privilege Assignment

<0:140.11.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.11.0-1.el10_0
  • M
Integer Overflow or Wraparound

<0:140.11.0-1.el10_0
  • L
CVE-2026-8968

<0:140.11.0-1.el10_0
  • L
Improperly Implemented Security Check for Standard

<0:140.11.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.11.0-1.el10_0
  • M
Integer Overflow or Wraparound

<0:140.11.0-1.el10_0
  • H
Undefined Behavior for Input to API

<0:140.11.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:140.11.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • H
CVE-2026-12329

<0:140.12.0-1.el10_2
  • M
Incorrect Calculation of Buffer Size

<0:140.12.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • M
Creation of chroot Jail Without Changing Working Directory

<0:140.12.0-1.el10_2
  • L
Incorrect Calculation of Buffer Size

<0:140.12.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.12.0-1.el10_2
  • H
Use of Out-of-range Pointer Offset

<0:140.12.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.12.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • M
Origin Validation Error

<0:140.12.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.12.0-1.el10_2
  • H
File Descriptor Leak

<0:140.12.0-1.el10_2
  • M
File Descriptor Leak

<0:140.12.0-1.el10_2
  • M
Reliance on Untrusted Inputs in a Security Decision

<0:140.12.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.12.0-1.el10_2
  • M
CVE-2026-12308

<0:140.12.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.12.0-1.el10_2
  • L
Improper Validation of Syntactic Correctness of Input

<0:140.12.0-1.el10_2
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.12.0-1.el10_2
  • M
CVE-2026-12302

<0:140.12.0-1.el10_2
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.12.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.12.0-1.el10_2
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Read

*
  • H
Heap-based Buffer Overflow

*
  • M
Uncontrolled Recursion

*
  • H
Out-of-bounds Write

<0:140.10.2-1.el10_0
  • H
Expired Pointer Dereference

<0:140.10.2-1.el10_0
  • H
CVE-2026-8094

<0:140.10.2-1.el10_0
  • M
Cross-site Scripting (XSS)

*
  • L
Improper Validation of Integrity Check Value

*
  • M
Trust Boundary Violation

<0:140.10.1-1.el10_0
  • H
Out-of-bounds Read

<0:140.10.1-1.el10_0
  • H
CVE-2026-7323

<0:140.10.1-1.el10_0
  • H
Out-of-bounds Write

<0:140.10.1-1.el10_0
  • M
HTTP Request Smuggling

*
  • L
Incorrect Privilege Assignment

<0:140.11.0-1.el10_2
  • L
External Control of Assumed-Immutable Web Parameter

<0:140.11.0-1.el10_2
  • L
CVE-2026-8968

<0:140.11.0-1.el10_2
  • L
Improperly Implemented Security Check for Standard

<0:140.11.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.11.0-1.el10_2
  • M
CVE-2026-8950

<0:140.11.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • M
File Descriptor Leak

<0:140.11.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.11.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.11.0-1.el10_2
  • M
Integer Overflow or Wraparound

<0:140.11.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.11.0-1.el10_2
  • H
Undefined Behavior for Input to API

<0:140.11.0-1.el10_2
  • M
Integer Overflow or Wraparound

<0:140.11.0-1.el10_2
  • H
Insufficient Compartmentalization

<0:140.11.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.11.0-1.el10_2
  • M
HTTP Request Smuggling

*
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • L
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_2
  • M
Expected Behavior Violation

<0:140.10.0-1.el10_2
  • M
Improper Handling of File Names

<0:140.10.0-1.el10_2
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.10.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • M
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • M
Trust Boundary Violation

<0:140.10.1-1.el10_2
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_2
  • M
Improperly Implemented Security Check for Standard

<0:140.10.0-1.el10_2
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_2
  • M
Buffer Access with Incorrect Length Value

<0:140.10.0-1.el10_2
  • M
Out-of-bounds Read

<0:140.10.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_2
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_2
  • M
Use of Potentially Dangerous Function

<0:140.10.0-1.el10_2
  • M
Improper Restriction of Rendered UI Layers or Frames

<0:140.10.0-1.el10_2
  • M
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • H
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_2
  • M
Use of Out-of-range Pointer Offset

<0:140.10.0-1.el10_2
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_2
  • H
Incorrect Privilege Assignment

<0:140.10.0-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_2
  • H
Out-of-bounds Read

<0:140.10.1-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.1-1.el10_2
  • H
CVE-2026-7323

<0:140.10.1-1.el10_2
  • H
CVE-2026-8094

<0:140.10.2-1.el10_2
  • H
Out-of-bounds Write

<0:140.10.2-1.el10_2
  • H
Expired Pointer Dereference

<0:140.10.2-1.el10_2
  • M
Expired Pointer Dereference

<0:140.10.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_0
  • M
Out-of-bounds Read

<0:140.10.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_0
  • H
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_0
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_0
  • M
Use of Potentially Dangerous Function

<0:140.10.0-1.el10_0
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.10.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_0
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_0
  • M
Improper Restriction of Rendered UI Layers or Frames

<0:140.10.0-1.el10_0
  • M
Improper Handling of File Names

<0:140.10.0-1.el10_0
  • H
Incorrect Privilege Assignment

<0:140.10.0-1.el10_0
  • L
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_0
  • M
Use of Out-of-range Pointer Offset

<0:140.10.0-1.el10_0
  • M
Improperly Implemented Security Check for Standard

<0:140.10.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_0
  • M
Expected Behavior Violation

<0:140.10.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.10.0-1.el10_0
  • M
Buffer Access with Incorrect Length Value

<0:140.10.0-1.el10_0
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_0
  • M
Out-of-bounds Write

*
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_0
  • H
Integer Overflow or Wraparound

<0:140.9.1-1.el10_0
  • M
Expired Pointer Dereference

<0:140.9.1-1.el10_0
  • M
Buffer Underflow

<0:140.9.1-1.el10_0
  • L
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_1
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.10.0-1.el10_1
  • M
Expected Behavior Violation

<0:140.10.0-1.el10_1
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_1
  • M
Buffer Access with Incorrect Length Value

<0:140.10.0-1.el10_1
  • M
Improper Handling of File Names

<0:140.10.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_1
  • M
Improperly Implemented Security Check for Standard

<0:140.10.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.10.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_1
  • M
Improper Restriction of Rendered UI Layers or Frames

<0:140.10.0-1.el10_1
  • H
Incorrect Privilege Assignment

<0:140.10.0-1.el10_1
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_1
  • M
Incorrect Privilege Assignment

<0:140.10.0-1.el10_1
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_1
  • M
Expired Pointer Dereference

<0:140.10.0-1.el10_1
  • M
Use of Out-of-range Pointer Offset

<0:140.10.0-1.el10_1
  • M
Use of Potentially Dangerous Function

<0:140.10.0-1.el10_1
  • M
Out-of-bounds Read

<0:140.10.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.10.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.10.0-1.el10_1
  • H
Incorrect Calculation of Buffer Size

<0:140.10.0-1.el10_1
  • H
Access of Uninitialized Pointer

<0:140.10.0-1.el10_1
  • M
Cross-site Scripting (XSS)

*
  • L
Out-of-bounds Write

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • M
Integer Overflow or Wraparound

*
  • H
Insufficient Compartmentalization

<0:140.9.0-1.el10_0
  • L
Buffer Access with Incorrect Length Value

<0:140.9.0-1.el10_0
  • L
Undefined Behavior for Input to API

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_0
  • M
Incorrect Privilege Assignment

<0:140.9.0-1.el10_0
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • M
Undefined Behavior for Input to API

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Read

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Allocation of Resources Without Limits or Throttling

<0:140.9.0-1.el10_0
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • H
Trust Boundary Violation

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.9.0-1.el10_0
  • H
Race Condition

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_0
  • H
HTTP Request Smuggling

<0:140.9.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_0
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_0
  • M
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • M
Expired Pointer Dereference

<0:140.9.1-1.el10_1
  • H
Incorrect Calculation of Buffer Size

<0:140.9.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • H
Buffer Overflow

<0:140.9.0-1.el10_0
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_0
  • H
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_0
  • M
Buffer Underflow

<0:140.9.1-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.1-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.1-1.el10_1
  • M
Expired Pointer Dereference

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Arbitrary Code Injection

*
  • M
Buffer Access with Incorrect Length Value

*
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
HTTP Request Smuggling

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Incorrect Calculation of Buffer Size

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • L
Buffer Access with Incorrect Length Value

<0:140.9.0-1.el10_1
  • L
Undefined Behavior for Input to API

<0:140.9.0-1.el10_1
  • H
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Read

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Exposure of Private Information ('Privacy Violation')

<0:140.9.0-1.el10_1
  • M
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • H
Integer Overflow or Wraparound

<0:140.9.0-1.el10_1
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_1
  • M
Access of Uninitialized Pointer

<0:140.9.0-1.el10_1
  • M
Use of Out-of-range Pointer Offset

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.9.0-1.el10_1
  • M
Compiler Optimization Removal or Modification of Security-critical Code

<0:140.9.0-1.el10_1
  • H
Buffer Overflow

<0:140.9.0-1.el10_1
  • M
Undefined Behavior for Input to API

<0:140.9.0-1.el10_1
  • M
Incorrect Privilege Assignment

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • H
Insufficient Compartmentalization

<0:140.9.0-1.el10_1
  • H
Expired Pointer Dereference

<0:140.9.0-1.el10_1
  • M
Allocation of Resources Without Limits or Throttling

<0:140.9.0-1.el10_1
  • H
Trust Boundary Violation

<0:140.9.0-1.el10_1
  • H
Race Condition

<0:140.9.0-1.el10_1
  • L
CVE-2026-2791

<0:140.8.0-2.el10_0
  • M
Use After Free

<0:140.8.0-2.el10_0
  • L
CVE-2026-2790

<0:140.8.0-2.el10_0
  • M
Access of Uninitialized Pointer

<0:140.8.0-2.el10_0
  • M
Use After Free

<0:140.8.0-2.el10_0
  • M
Use After Free

<0:140.8.0-2.el10_0
  • M
CVE-2026-2788

<0:140.8.0-2.el10_0
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.8.0-2.el10_0
  • M
CVE-2026-2784

<0:140.8.0-2.el10_0
  • M
CVE-2026-2782

<0:140.8.0-2.el10_0
  • H
CVE-2026-2775

<0:140.8.0-2.el10_0
  • M
Integer Overflow or Wraparound

<0:140.8.0-2.el10_0
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_0
  • H
CVE-2026-2777

<0:140.8.0-2.el10_0
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_0
  • M
CVE-2026-2779

<0:140.8.0-2.el10_0
  • H
CVE-2026-2776

<0:140.8.0-2.el10_0
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2778

<0:140.8.0-2.el10_0
  • M
CVE-2026-2780

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2771

<0:140.8.0-2.el10_0
  • H
CVE-2026-2768

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2769

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_0
  • H
CVE-2026-2760

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2773

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2759

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
Use After Free

<0:140.8.0-2.el10_0
  • H
CVE-2026-2757

<0:140.8.0-2.el10_0
  • H
CVE-2026-2761

<0:140.8.0-2.el10_0
  • H
CVE-2026-2447

<0:140.8.0-2.el10_0
  • M
CVE-2026-23865

*
  • M
Unchecked Input for Loop Condition

*
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_1
  • H
Out-of-bounds Write

<0:140.8.0-2.el10_1
  • L
CVE-2026-2791

<0:140.8.0-2.el10_1
  • L
CVE-2026-2790

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
CVE-2026-2782

<0:140.8.0-2.el10_1
  • M
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • M
CVE-2026-2788

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
CVE-2026-2784

<0:140.8.0-2.el10_1
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

<0:140.8.0-2.el10_1
  • M
Access of Uninitialized Pointer

<0:140.8.0-2.el10_1
  • M
Use After Free

<0:140.8.0-2.el10_1
  • M
CVE-2026-2779

<0:140.8.0-2.el10_1
  • H
CVE-2026-2778

<0:140.8.0-2.el10_1
  • H
CVE-2026-2776

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2775

<0:140.8.0-2.el10_1
  • H
CVE-2026-2777

<0:140.8.0-2.el10_1
  • H
CVE-2026-2773

<0:140.8.0-2.el10_1
  • H
CVE-2026-2769

<0:140.8.0-2.el10_1
  • M
CVE-2026-2780

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2768

<0:140.8.0-2.el10_1
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2771

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2760

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
Integer Overflow or Wraparound

<0:140.8.0-2.el10_1
  • H
CVE-2026-2761

<0:140.8.0-2.el10_1
  • H
CVE-2026-2759

<0:140.8.0-2.el10_1
  • H
CVE-2026-2757

<0:140.8.0-2.el10_1
  • H
Use After Free

<0:140.8.0-2.el10_1
  • H
CVE-2026-2447

<0:140.8.0-2.el10_1
  • M
Incorrect Behavior Order: Early Validation

*
  • L
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
CVE-2026-0890

<0:140.7.0-1.el10_1
  • L
CVE-2026-0890

<0:140.7.0-1.el10_0
  • M
CVE-2026-0886

<0:140.7.0-1.el10_1
  • M
CVE-2026-0886

<0:140.7.0-1.el10_0
  • M
CVE-2026-0885

<0:140.7.0-1.el10_1
  • M
CVE-2026-0885

<0:140.7.0-1.el10_0
  • M
CVE-2026-0883

<0:140.7.0-1.el10_1
  • M
CVE-2026-0883

<0:140.7.0-1.el10_0
  • M
CVE-2026-0887

<0:140.7.0-1.el10_1
  • M
CVE-2026-0887

<0:140.7.0-1.el10_0
  • M
Authentication Bypass

<0:140.7.0-1.el10_1
  • M
CVE-2026-0884

<0:140.7.0-1.el10_1
  • M
Authentication Bypass

<0:140.7.0-1.el10_0
  • M
CVE-2026-0884

<0:140.7.0-1.el10_0
  • H
CVE-2026-0877

<0:140.7.0-1.el10_1
  • H
CVE-2026-0877

<0:140.7.0-1.el10_0
  • H
CVE-2026-0882

<0:140.7.0-1.el10_1
  • H
CVE-2026-0882

<0:140.7.0-1.el10_0
  • H
CVE-2026-0891

<0:140.7.0-1.el10_1
  • H
CVE-2026-0879

<0:140.7.0-1.el10_1
  • H
CVE-2026-0879

<0:140.7.0-1.el10_0
  • H
CVE-2026-0891

<0:140.7.0-1.el10_0
  • H
CVE-2026-0880

<0:140.7.0-1.el10_1
  • H
CVE-2026-0880

<0:140.7.0-1.el10_0
  • H
CVE-2026-0878

<0:140.7.0-1.el10_1
  • H
CVE-2026-0878

<0:140.7.0-1.el10_0
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Buffer Overflow

*
  • M
Deserialization of Untrusted Data

*
  • M
Improper Input Validation

*
  • M
CRLF Injection

*
  • M
CRLF Injection

*
  • M
Arbitrary Code Injection

*
  • M
Improper Neutralization

*
  • M
NULL Pointer Dereference

*
  • M
CVE-2025-14330

<0:140.6.0-1.el10_0
  • H
Use After Free

<0:140.6.0-1.el10_0
  • M
CVE-2025-14329

<0:140.6.0-1.el10_0
  • M
CVE-2025-14328

<0:140.6.0-1.el10_0
  • M
Out-of-bounds Write

<0:140.6.0-1.el10_0
  • M
Origin Validation Error

<0:140.6.0-1.el10_0
  • H
CVE-2025-14324

<0:140.6.0-1.el10_0
  • H
CVE-2025-14323

<0:140.6.0-1.el10_0
  • H
CVE-2025-14322

<0:140.6.0-1.el10_0
  • H
Arbitrary Code Injection

<0:140.6.0-1.el10_1
  • H
CVE-2025-14323

<0:140.6.0-1.el10_1
  • M
CVE-2025-14330

<0:140.6.0-1.el10_1
  • M
Out-of-bounds Write

<0:140.6.0-1.el10_1
  • H
CVE-2025-14322

<0:140.6.0-1.el10_1
  • M
CVE-2025-14329

<0:140.6.0-1.el10_1
  • H
CVE-2025-14324

<0:140.6.0-1.el10_1
  • M
CVE-2025-14328

<0:140.6.0-1.el10_1
  • H
Use After Free

<0:140.6.0-1.el10_1
  • M
Origin Validation Error

<0:140.6.0-1.el10_1
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Out-of-bounds Read

*
  • L
Algorithmic Complexity

*
  • M
Out-of-bounds Read

*
  • L
Authentication Bypass

<0:140.5.0-2.el10_1
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_1
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_1
  • H
Race Condition

<0:140.5.0-2.el10_1
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_1
  • M
Origin Validation Error

<0:140.5.0-2.el10_1
  • H
Out-of-bounds Write

<0:140.5.0-2.el10_1
  • M
Trust Boundary Violation

<0:140.5.0-2.el10_1
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_1
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_0
  • H
Out-of-bounds Write

<0:140.5.0-2.el10_0
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_0
  • M
Cross-site Scripting (XSS)

<0:140.5.0-2.el10_0
  • M
Trust Boundary Violation

<0:140.5.0-2.el10_0
  • L
Authentication Bypass

<0:140.5.0-2.el10_0
  • M
Expired Pointer Dereference

<0:140.5.0-2.el10_0
  • M
Origin Validation Error

<0:140.5.0-2.el10_0
  • H
Race Condition

<0:140.5.0-2.el10_0
  • L
Allocation of Resources Without Limits or Throttling

*
  • H
Out-of-bounds Write

<0:140.4.0-3.el10_0
  • H
Use After Free

<0:140.4.0-3.el10_0
  • M
Interpretation Conflict

<0:140.4.0-3.el10_0
  • H
Out-of-Bounds

<0:140.4.0-3.el10_0
  • H
Improper Access Control

<0:140.4.0-3.el10_0
  • H
Out-of-Bounds

<0:140.4.0-3.el10_0
  • H
Exposure of System Data to an Unauthorized Control Sphere

<0:140.4.0-3.el10_0
  • M
Out-of-bounds Read

<0:140.3.0-1.el10_0
  • M
Integer Overflow or Wraparound

<0:140.3.0-1.el10_0
  • M
CVE-2025-10529

<0:140.3.0-1.el10_0
  • H
Access of Uninitialized Pointer

<0:140.3.0-1.el10_0
  • H
CVE-2025-10537

<0:140.3.0-1.el10_0
  • L
CVE-2025-10536

<0:140.3.0-1.el10_0
  • H
Use After Free

<0:140.3.0-1.el10_0
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Improper Neutralization

*
  • M
Information Exposure Through Caching

*
  • M
Improper Input Validation

*
  • L
Resource Exhaustion

<0:128.14.0-2.el10_0
  • H
Information Exposure

<0:128.14.0-2.el10_0
  • H
Out-of-Bounds

<0:128.14.0-2.el10_0
  • M
Improper Initialization

<0:128.14.0-2.el10_0
  • H
Out-of-Bounds

<0:128.14.0-2.el10_0
  • L
Improper Encoding or Escaping of Output

*
  • M
Buffer Over-read

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Arbitrary Code Injection

<0:128.13.0-1.el10_0
  • M
Incorrect Default Permissions

<0:128.13.0-1.el10_0
  • M
Cross-site Scripting (XSS)

<0:128.13.0-1.el10_0
  • H
Out-of-Bounds

<0:128.13.0-1.el10_0
  • M
Protection Mechanism Failure

<0:128.13.0-1.el10_0
  • H
Use of Uninitialized Variable

<0:128.13.0-1.el10_0
  • L
NULL Pointer Dereference

<0:128.13.0-1.el10_0
  • H
Insufficient Protection Against Instruction Skipping Via Fault Injection

<0:128.13.0-1.el10_0
  • H
Out-of-Bounds

<0:128.13.0-1.el10_0
  • L
Race Condition

*
  • L
Improper Validation of Specified Quantity in Input

*
  • L
Uncontrolled Memory Allocation

*
  • L
Improper Check for Unusual or Exceptional Conditions

*
  • L
Information Exposure

*
  • M
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Information Exposure

*
  • M
User Interface (UI) Misrepresentation of Critical Information

*
  • M
Use After Free

*
  • M
Out-of-Bounds

*
  • M
Buffer Overflow

*
  • M
Use After Free

*
  • M
Buffer Overflow

*
  • M
Out-of-Bounds

*
  • M
Use After Free

*
  • M
Open Redirect

*
  • M
Unintended Proxy or Intermediary ('Confused Deputy')

*
  • M
Out-of-Bounds

*
  • M
Improper Restriction of Rendered UI Layers or Frames

*
  • M
Access of Uninitialized Pointer

*
  • M
Missing Authentication for Critical Function

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Use After Free

*
  • H
Use After Free

*
  • H
Arbitrary Code Injection

*
  • H
Arbitrary Code Injection

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Improper Restriction of Rendered UI Layers or Frames

*
  • H
Buffer Overflow

*
  • M
HTTP Request Smuggling

*
  • L
HTTP Request Smuggling

*
  • M
Cross-site Scripting (XSS)

<0:128.12.0-1.el10_0
  • M
Use of Incorrectly-Resolved Name or Reference

<0:128.12.0-1.el10_0
  • M
Information Exposure

<0:128.12.0-1.el10_0
  • H
Use After Free

<0:128.12.0-1.el10_0
  • L
Improper Input Validation

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • L
Expired Pointer Dereference

*
  • L
Reachable Assertion

*
  • H
Double Free

<0:128.11.0-1.el10_0
  • L
Improper Check for Unusual or Exceptional Conditions

*
  • L
Improper Restriction of Rendered UI Layers or Frames

*
  • M
Improper Cleanup on Thrown Exception

*
  • H
Buffer Overflow

*
  • H
Buffer Overflow

*
  • H
Use After Free

*
  • H
Use After Free

*
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • H
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Race Condition

*
  • L
Improper Restriction of Rendered UI Layers or Frames

<0:128.11.0-1.el10_0
  • M
Inclusion of Functionality from Untrusted Control Sphere

<0:128.11.0-1.el10_0
  • M
Out-of-Bounds

<0:128.11.0-1.el10_0
  • M
Improper Encoding or Escaping of Output

<0:128.11.0-1.el10_0
  • M
Inclusion of Functionality from Untrusted Control Sphere

<0:128.11.0-1.el10_0
  • M
Out-of-Bounds

<0:128.11.0-1.el10_0
  • M
CVE-2025-48068

*
  • H
Out-of-bounds Write

<0:128.10.1-1.el10_0
  • H
Out-of-bounds Write

<0:128.10.1-1.el10_0
  • L
Use After Free

*
  • M
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

*
  • L
Information Exposure

*
  • L
Product UI does not Warn User of Unsafe Actions

*
  • M
Double Free

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improper Validation of Integrity Check Value

*
  • H
Buffer Overflow

*
  • M
Incomplete Filtering of Special Elements

*
  • M
Buffer Overflow

<0:128.10.0-1.el10_0
  • M
Out-of-bounds Read

<0:128.10.0-1.el10_0
  • H
Buffer Overflow

<0:128.10.0-1.el10_0
  • H
Arbitrary Code Injection

<0:128.10.0-1.el10_0
  • H
Insufficient Compartmentalization

<0:128.10.0-1.el10_0
  • M
Origin Validation Error

<0:128.9.0-3.el10_0
  • H
Buffer Overflow

<0:128.9.0-3.el10_0
  • H
Use After Free

<0:128.9.0-3.el10_0