Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/firefox@50.1.0-1
purl pkg:alpm/archlinux/firefox@50.1.0-1
Next non-vulnerable version 52.0-1
Latest non-vulnerable version 101.0-1
Risk 10.0
Vulnerabilities affecting this package (21)
Vulnerability Summary Fixed by
VCID-4z19-eyh7-9yf4
Aliases:
CVE-2017-5387
The existence of a specifically requested local file can be found due to the double firing of the onerror when the source attribute on a <track> tag refers to a file that does not exist if the source page is loaded locally.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-5n3q-eby7-67de
Aliases:
CVE-2017-5373
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-84kk-wfxx-t3c8
Aliases:
CVE-2017-5380
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-af6b-4jqc-fugx
Aliases:
CVE-2017-5393
The mozAddonManager allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. This could allow malicious extensions to install additional extensions from the CDN in combination with an XSS attack on Mozilla AMO sites.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-ahzr-nr7g-5ue2
Aliases:
CVE-2017-5388
A STUN server in conjunction with a large number of webkitRTCPeerConnection objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on e10s systems, allowing for a denial of service attack.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-bjyq-1zfk-eugq
Aliases:
CVE-2017-5383
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-c8p3-ef58-wudt
Aliases:
CVE-2017-5376
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-dv2d-9a59-xkaq
Aliases:
CVE-2017-5384
Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which exposes more information than would be sent to the proxy itself in the case of HTTPS. Normally the Proxy Auto-Config file is specified by the user or machine owner and presumed to be non-malicious, but if a user has enabled Web Proxy Auto Detect (WPAD) this file can be served remotely.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-e2ww-ngam-cugq
Aliases:
CVE-2017-5381
The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slashes, allowing certificate content to be saved in unsafe locations with an arbitrary filename.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-gcen-3yba-a3ht
Aliases:
CVE-2017-5375
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-hhtb-ha1v-tffj
Aliases:
CVE-2017-5377
A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable crash.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-htpg-t39z-nbex
Aliases:
CVE-2017-5379
Use-after-free vulnerability in Web Animations when interacting with cycle collection found through fuzzing.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-hyhc-qud7-6uax
Aliases:
CVE-2017-5396
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-m59v-ygc2-qucg
Aliases:
CVE-2017-5378
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-qjs9-h3tt-qucf
Aliases:
CVE-2017-5391
Special about: pages used by web content, such as RSS feeds, can load privileged about: pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-r34s-64j2-dfff
Aliases:
CVE-2017-5382
Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-r7te-y4n3-1uhj
Aliases:
CVE-2017-5385
Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, leading to potential information disclosure for sites using this header.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-tjjd-y1pq-ckf4
Aliases:
CVE-2017-5390
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could lead to the execution of arbitrary code.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-u1nc-fgsw-mkhc
Aliases:
CVE-2017-5374
Mozilla developers and community members Gary Kwong, Olli Pettay, Tooru Fujisawa, Carsten Book, Andrew McCreight, Chris Pearce, Ronald Crane, Jan de Mooij, Julian Seward, Nicolas Pierron, Randell Jesup, Esther Monchari, Honza Bambas, and Philipp reported memory safety bugs present in Firefox 50.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-vnuz-wp96-pqgt
Aliases:
CVE-2017-5389
WebExtensions could use the mozAddonManager API by modifying the CSP headers on sites with the appropriate permissions and then using host requests to redirect script loads to a malicious site. This allows a malicious extension to then install additional extensions without explicit user permission.
51.0.1-1
Affected by 25 other vulnerabilities.
VCID-vtwg-jhr9-nydc
Aliases:
CVE-2017-5386
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code.
51.0.1-1
Affected by 25 other vulnerabilities.
Vulnerabilities fixed by this package (13)
Vulnerability Summary Aliases
VCID-1tcx-3zn1-ykdq Multiple vulnerabilities have been found in Mozilla Firefox and Thunderbird the worst of which could lead to the execution of arbitrary code. CVE-2016-9904
VCID-2ptm-gx1p-uyhf Multiple vulnerabilities have been found in Mozilla Firefox and Thunderbird the worst of which could lead to the execution of arbitrary code. CVE-2016-9897
VCID-2xe3-59tz-zbc3 Multiple vulnerabilities have been found in Mozilla Firefox and Thunderbird the worst of which could lead to the execution of arbitrary code. CVE-2016-9901
VCID-4d2q-usge-77ft Multiple vulnerabilities have been found in Mozilla Firefox and Thunderbird the worst of which could lead to the execution of arbitrary code. CVE-2016-9898
VCID-5dyh-s3yd-vqes Multiple vulnerabilities have been found in Mozilla Firefox and Thunderbird the worst of which could lead to the execution of arbitrary code. CVE-2016-9895
VCID-9fsb-vzuc-efc5 A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later writers will overflow the buffer, resulting in a potentially exploitable crash. CVE-2016-9894
VCID-fgnu-kh7z-xuau Multiple vulnerabilities have been found in Mozilla Firefox and Thunderbird the worst of which could lead to the execution of arbitrary code. CVE-2016-9902
VCID-gqhc-h5p7-dyh1 Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an additional vulnerability allowed this resource to be loaded as a document it could allow injecting content and script into an add-on's context. CVE-2016-9903
VCID-m5pb-75ag-tfep Use-after-free while manipulating the navigator object within WebVR. *Note: WebVR is not currently enabled by default.* CVE-2016-9896
VCID-pbrt-gcqj-kycv Multiple vulnerabilities have been found in Mozilla Firefox and Thunderbird the worst of which could lead to the execution of arbitrary code. CVE-2016-9900
VCID-qu91-vc1p-dyb1 Multiple vulnerabilities have been found in Mozilla Firefox and Thunderbird the worst of which could lead to the execution of arbitrary code. CVE-2016-9899
VCID-wffz-7y83-qkbm Mozilla developers and community members Kan-Ru Chen, Christian Holler, and Tyson Smith reported memory safety bugs present in Firefox 50.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. CVE-2016-9080
VCID-ysg5-wc3n-fbgw Multiple vulnerabilities have been found in Mozilla Firefox and Thunderbird the worst of which could lead to the execution of arbitrary code. CVE-2016-9893

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-07T13:59:11.461908+00:00 Arch Linux Importer Fixing VCID-wffz-7y83-qkbm https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.450249+00:00 Arch Linux Importer Fixing VCID-ysg5-wc3n-fbgw https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.439311+00:00 Arch Linux Importer Fixing VCID-9fsb-vzuc-efc5 https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.429028+00:00 Arch Linux Importer Fixing VCID-5dyh-s3yd-vqes https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.418377+00:00 Arch Linux Importer Fixing VCID-m5pb-75ag-tfep https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.407968+00:00 Arch Linux Importer Fixing VCID-2ptm-gx1p-uyhf https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.396259+00:00 Arch Linux Importer Fixing VCID-4d2q-usge-77ft https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.385566+00:00 Arch Linux Importer Fixing VCID-qu91-vc1p-dyb1 https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.373635+00:00 Arch Linux Importer Fixing VCID-pbrt-gcqj-kycv https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.359373+00:00 Arch Linux Importer Fixing VCID-2xe3-59tz-zbc3 https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.343607+00:00 Arch Linux Importer Fixing VCID-fgnu-kh7z-xuau https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.331582+00:00 Arch Linux Importer Fixing VCID-gqhc-h5p7-dyh1 https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.318803+00:00 Arch Linux Importer Fixing VCID-1tcx-3zn1-ykdq https://security.archlinux.org/AVG-106 38.1.0
2026-04-07T13:59:11.306185+00:00 Arch Linux Importer Affected by VCID-5n3q-eby7-67de https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.293354+00:00 Arch Linux Importer Affected by VCID-u1nc-fgsw-mkhc https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.281929+00:00 Arch Linux Importer Affected by VCID-gcen-3yba-a3ht https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.269726+00:00 Arch Linux Importer Affected by VCID-c8p3-ef58-wudt https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.258788+00:00 Arch Linux Importer Affected by VCID-hhtb-ha1v-tffj https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.246308+00:00 Arch Linux Importer Affected by VCID-m59v-ygc2-qucg https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.234935+00:00 Arch Linux Importer Affected by VCID-htpg-t39z-nbex https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.224566+00:00 Arch Linux Importer Affected by VCID-84kk-wfxx-t3c8 https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.214507+00:00 Arch Linux Importer Affected by VCID-e2ww-ngam-cugq https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.203193+00:00 Arch Linux Importer Affected by VCID-r34s-64j2-dfff https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.189436+00:00 Arch Linux Importer Affected by VCID-bjyq-1zfk-eugq https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.178278+00:00 Arch Linux Importer Affected by VCID-dv2d-9a59-xkaq https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.166735+00:00 Arch Linux Importer Affected by VCID-r7te-y4n3-1uhj https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.154921+00:00 Arch Linux Importer Affected by VCID-vtwg-jhr9-nydc https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.142884+00:00 Arch Linux Importer Affected by VCID-4z19-eyh7-9yf4 https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.132257+00:00 Arch Linux Importer Affected by VCID-ahzr-nr7g-5ue2 https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.121433+00:00 Arch Linux Importer Affected by VCID-vnuz-wp96-pqgt https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.110972+00:00 Arch Linux Importer Affected by VCID-tjjd-y1pq-ckf4 https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.100592+00:00 Arch Linux Importer Affected by VCID-qjs9-h3tt-qucf https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.088840+00:00 Arch Linux Importer Affected by VCID-af6b-4jqc-fugx https://security.archlinux.org/AVG-157 38.1.0
2026-04-07T13:59:11.077935+00:00 Arch Linux Importer Affected by VCID-hyhc-qud7-6uax https://security.archlinux.org/AVG-157 38.1.0
2026-04-01T18:24:55.357553+00:00 Arch Linux Importer Fixing VCID-wffz-7y83-qkbm https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.332041+00:00 Arch Linux Importer Fixing VCID-ysg5-wc3n-fbgw https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.307353+00:00 Arch Linux Importer Fixing VCID-9fsb-vzuc-efc5 https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.282484+00:00 Arch Linux Importer Fixing VCID-5dyh-s3yd-vqes https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.257277+00:00 Arch Linux Importer Fixing VCID-m5pb-75ag-tfep https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.232538+00:00 Arch Linux Importer Fixing VCID-2ptm-gx1p-uyhf https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.206486+00:00 Arch Linux Importer Fixing VCID-4d2q-usge-77ft https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.183720+00:00 Arch Linux Importer Fixing VCID-qu91-vc1p-dyb1 https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.158542+00:00 Arch Linux Importer Fixing VCID-pbrt-gcqj-kycv https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.135169+00:00 Arch Linux Importer Fixing VCID-2xe3-59tz-zbc3 https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.111509+00:00 Arch Linux Importer Fixing VCID-fgnu-kh7z-xuau https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.086790+00:00 Arch Linux Importer Fixing VCID-gqhc-h5p7-dyh1 https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:55.062549+00:00 Arch Linux Importer Fixing VCID-1tcx-3zn1-ykdq https://security.archlinux.org/AVG-106 38.0.0
2026-04-01T18:24:54.063016+00:00 Arch Linux Importer Affected by VCID-5n3q-eby7-67de https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:54.037796+00:00 Arch Linux Importer Affected by VCID-u1nc-fgsw-mkhc https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:54.014795+00:00 Arch Linux Importer Affected by VCID-gcen-3yba-a3ht https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.991890+00:00 Arch Linux Importer Affected by VCID-c8p3-ef58-wudt https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.968089+00:00 Arch Linux Importer Affected by VCID-hhtb-ha1v-tffj https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.944488+00:00 Arch Linux Importer Affected by VCID-m59v-ygc2-qucg https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.920890+00:00 Arch Linux Importer Affected by VCID-htpg-t39z-nbex https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.897732+00:00 Arch Linux Importer Affected by VCID-84kk-wfxx-t3c8 https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.874717+00:00 Arch Linux Importer Affected by VCID-e2ww-ngam-cugq https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.852712+00:00 Arch Linux Importer Affected by VCID-r34s-64j2-dfff https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.827155+00:00 Arch Linux Importer Affected by VCID-bjyq-1zfk-eugq https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.804038+00:00 Arch Linux Importer Affected by VCID-dv2d-9a59-xkaq https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.780109+00:00 Arch Linux Importer Affected by VCID-r7te-y4n3-1uhj https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.757558+00:00 Arch Linux Importer Affected by VCID-vtwg-jhr9-nydc https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.732905+00:00 Arch Linux Importer Affected by VCID-4z19-eyh7-9yf4 https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.708464+00:00 Arch Linux Importer Affected by VCID-ahzr-nr7g-5ue2 https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.685354+00:00 Arch Linux Importer Affected by VCID-vnuz-wp96-pqgt https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.660693+00:00 Arch Linux Importer Affected by VCID-tjjd-y1pq-ckf4 https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.637766+00:00 Arch Linux Importer Affected by VCID-qjs9-h3tt-qucf https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.613853+00:00 Arch Linux Importer Affected by VCID-af6b-4jqc-fugx https://security.archlinux.org/AVG-157 38.0.0
2026-04-01T18:24:53.589512+00:00 Arch Linux Importer Affected by VCID-hyhc-qud7-6uax https://security.archlinux.org/AVG-157 38.0.0