ROS-20260129-73-0069

Vulnerability in firefox related to operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...

ROS-20260129-73-0071

Vulnerability in firefox related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

ROS-20260129-73-0068

Vulnerability in firefox related to a breach of the data protection mechanism. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions...

CVE-2026-24869

Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability affects Firefox 147.0.2...

PT-2026-4957

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 147.0.2 Description A mitigation bypass exists in the Privacy: Anti-Tracking component. This issue allows bypassing of implemented protections. Recommendations Update Firefox to version 147.0.2 or later...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Spoofing issue in the Downloads Panel component CVE-2025-14327 firefox: Use-after-free in the JavaScript: GC component CVE-2026-0885 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7,...

MiracleLinux 9 : firefox-115.13.0-3.el9_4.ML.1 (AXSA:2024-8564:24)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8564:24 advisory. Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 CVE-2024-6604 Mozilla: Race condition in permission...

MiracleLinux 4 : firefox-60.6.1-1.0.1.AXS4 (AXSA:2019-3822:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3822:01 advisory. Security Fix - CVE-2019-9810, CVE-2019-9813 CVE CVEJVNhttp://jvndb.jvn.jp/ Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : firefox-91.7.0-3.el8.ML.1 (AXSA:2022-3095:06)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-3095:06 advisory. Mozilla: Use-after-free in XSLT parameter processing CVE-2022-26485 Mozilla: Use-after-free in WebGPU IPC Framework CVE-2022-26486 expat: Malformed ...

MiracleLinux 9 : firefox-128.4.0-1.el9_4.ML.1 (AXSA:2024-8972:37)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8972:37 advisory. firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser CVE-2024-10464 firefox:...

MiracleLinux 4 : firefox-78.14.0-1.0.1.AXS4 (AXSA:2021-2418:27)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2418:27 advisory. Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 CVE-2021-38493 Tenable has extracted the preceding description block...

MiracleLinux 7 : firefox-91.8.0-1.0.1.el7.AXS7 (AXSA:2022-3144:08)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-3144:08 advisory. Mozilla: Use-after-free in NSSToken objects CVE-2022-1097 Mozilla: Out of bounds write due to unexpected WebAuthN Extensions CVE-2022-28281 Mozilla:...

MiracleLinux 7 : firefox-91.9.1-1.0.1.el7.AXS7 (AXSA:2022-3195:12)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-3195:12 advisory. Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution CVE-2022-1529 Mozilla: Prototype pollution in Top-Level...

MiracleLinux 4 : firefox-78.6.1-1.0.1.AXS4 (AXSA:2021-1250:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-1250:01 advisory. Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk CVE-2020-16044 Tenable has extracted the preceding description block directly...

MiracleLinux 4 : firefox-52.7.3-1.0.1.AXS4 (AXSA:2018-2955:04)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2955:04 advisory. firefox: Use-after-free in compositor potentially allows code execution CVE-2018-5148 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : firefox-128.3.1-2.el9_4.ML.1 (AXSA:2024-8908:34)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8908:34 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the...

MiracleLinux 7 : firefox-91.13.0-1.0.1.el7.AXS7 (AXSA:2022-3756:21)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-3756:21 advisory. Mozilla: Address bar spoofing via XSLT error handling CVE-2022-38472 Mozilla: Cross-origin XSLT Documents would have inherited the parent's...

MiracleLinux 8 : firefox-78.12.0-1.el8.ML.1 (AXSA:2021-2303:20)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2303:20 advisory. Mozilla: Use-after-free in accessibility features of a document CVE-2021-29970 Mozilla: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12...

MiracleLinux 7 : firefox-68.9.0-1.0.1.el7.AXS7 (AXSA:2020-124:13)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-124:13 advisory. Mozilla: Use-after-free in SharedWorkerService CVE-2020-12405 Mozilla: JavaScript Type confusion with NativeTypes CVE-2020-12406 Mozilla: Memory safe...

MiracleLinux 4 : firefox-78.12.0-1.0.1.AXS4 (AXSA:2021-2238:17)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2238:17 advisory. Mozilla: Use-after-free in accessibility features of a document CVE-2021-29970 Mozilla: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12...