Search for packages
| purl | pkg:alpm/archlinux/firefox@52.0.2-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1asm-t31q-w3ef
Aliases: CVE-2017-5455 |
The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. |
Affected by 0 other vulnerabilities. |
|
VCID-23bx-as83-e3bv
Aliases: CVE-2017-5435 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-2j7g-g6dj-qydb
Aliases: CVE-2017-5466 |
If a page is loaded from an original site through a hyperlink and contains a redirect to a data:text/html URL, triggering a reload will run the reloaded data:text/html page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. |
Affected by 0 other vulnerabilities. |
|
VCID-3315-b7du-kydm
Aliases: CVE-2017-5448 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-3ega-m6fz-uugy
Aliases: CVE-2017-5464 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-4n3b-syg9-ykh9
Aliases: CVE-2017-5446 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-54vr-pby9-ffg7
Aliases: CVE-2017-5459 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-6a5y-dwev-93be
Aliases: CVE-2017-5458 |
When a javascript: URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to be socially engineered to execute an XSS attack on themselves. |
Affected by 0 other vulnerabilities. |
|
VCID-6p3q-f7f6-mygv
Aliases: CVE-2017-5430 |
Mozilla developers and community members Christian Holler, Jon Coppeard, Milan Sreckovic, Tyson Smith, Ronald Crane, Randell Jesup, Philipp, Tooru Fujisawa, and Kan-Ru Chen reported memory safety bugs present in Firefox 52 and Firefox ESR 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-6sun-2gu6-jqh7
Aliases: CVE-2017-5434 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-77xw-dvy5-5uch
Aliases: CVE-2017-5445 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-79kw-syxy-n7a1
Aliases: CVE-2017-5447 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-8frm-8p43-pyh8
Aliases: CVE-2017-5442 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-8wgm-j522-4yac
Aliases: CVE-2017-5436 |
An out-of-bounds write in Graphite might allow remote attackers to execute arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-c11z-6f9c-3bb5
Aliases: CVE-2017-5451 |
A mechanism to spoof the addressbar through the user interaction on the addressbar and the onblur event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. |
Affected by 0 other vulnerabilities. |
|
VCID-dsuj-fmtr-cbft
Aliases: CVE-2017-5432 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-e43t-3b7n-c3bj
Aliases: CVE-2017-5454 |
A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. |
Affected by 0 other vulnerabilities. |
|
VCID-f5dh-8kx7-vbfq
Aliases: CVE-2017-5441 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-f9dc-n2bd-gqdt
Aliases: CVE-2017-5449 |
A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. |
Affected by 0 other vulnerabilities. |
|
VCID-h2zq-ubdu-sqc8
Aliases: CVE-2017-5443 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-hq7v-u57f-5uhc
Aliases: CVE-2017-5456 |
A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. |
Affected by 0 other vulnerabilities. |
|
VCID-hthe-t85x-13gz
Aliases: CVE-2017-5465 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-jzb7-dve8-jygb
Aliases: CVE-2017-5438 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-kxvg-qw8v-vydv
Aliases: CVE-2017-5461 |
Multiple vulnerabilities have been found in NSS, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-pp4w-2986-nqee
Aliases: CVE-2017-5467 |
A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. |
Affected by 0 other vulnerabilities. |
|
VCID-q72b-g1hz-23fs
Aliases: CVE-2017-5429 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-q83t-h55y-eyhv
Aliases: CVE-2017-5453 |
A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's TITLE element. This vulnerability allows for spoofing but no scripted content can be run. |
Affected by 0 other vulnerabilities. |
|
VCID-ru7n-21qs-eyfx
Aliases: CVE-2017-5469 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-rwnr-ngz9-akg1
Aliases: CVE-2017-5437 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-x4gg-h5q9-ufbc
Aliases: CVE-2017-5468 |
An issue with incorrect ownership model of privateBrowsing information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. |
Affected by 0 other vulnerabilities. |
|
VCID-y2dd-vp7y-5ka1
Aliases: CVE-2017-5444 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-yaew-dtry-pkfv
Aliases: CVE-2017-5433 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-z4hp-wpp1-17bu
Aliases: CVE-2017-5460 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-zr38-6kvs-ckdh
Aliases: CVE-2017-5440 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
|
VCID-zyxf-mxw2-4yc1
Aliases: CVE-2017-5439 |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-07T13:59:10.753091+00:00 | Arch Linux Importer | Affected by | VCID-q72b-g1hz-23fs | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.741879+00:00 | Arch Linux Importer | Affected by | VCID-6p3q-f7f6-mygv | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.729881+00:00 | Arch Linux Importer | Affected by | VCID-dsuj-fmtr-cbft | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.718098+00:00 | Arch Linux Importer | Affected by | VCID-yaew-dtry-pkfv | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.696133+00:00 | Arch Linux Importer | Affected by | VCID-6sun-2gu6-jqh7 | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.679650+00:00 | Arch Linux Importer | Affected by | VCID-23bx-as83-e3bv | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.668092+00:00 | Arch Linux Importer | Affected by | VCID-8wgm-j522-4yac | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.655209+00:00 | Arch Linux Importer | Affected by | VCID-rwnr-ngz9-akg1 | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.644367+00:00 | Arch Linux Importer | Affected by | VCID-jzb7-dve8-jygb | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.631516+00:00 | Arch Linux Importer | Affected by | VCID-zyxf-mxw2-4yc1 | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.620295+00:00 | Arch Linux Importer | Affected by | VCID-zr38-6kvs-ckdh | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.609918+00:00 | Arch Linux Importer | Affected by | VCID-f5dh-8kx7-vbfq | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.599122+00:00 | Arch Linux Importer | Affected by | VCID-8frm-8p43-pyh8 | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.588424+00:00 | Arch Linux Importer | Affected by | VCID-h2zq-ubdu-sqc8 | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.571218+00:00 | Arch Linux Importer | Affected by | VCID-y2dd-vp7y-5ka1 | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.558407+00:00 | Arch Linux Importer | Affected by | VCID-77xw-dvy5-5uch | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.546478+00:00 | Arch Linux Importer | Affected by | VCID-4n3b-syg9-ykh9 | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.535435+00:00 | Arch Linux Importer | Affected by | VCID-79kw-syxy-n7a1 | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.522916+00:00 | Arch Linux Importer | Affected by | VCID-3315-b7du-kydm | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.510235+00:00 | Arch Linux Importer | Affected by | VCID-f9dc-n2bd-gqdt | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.494395+00:00 | Arch Linux Importer | Affected by | VCID-c11z-6f9c-3bb5 | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.481577+00:00 | Arch Linux Importer | Affected by | VCID-q83t-h55y-eyhv | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.470200+00:00 | Arch Linux Importer | Affected by | VCID-e43t-3b7n-c3bj | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.457026+00:00 | Arch Linux Importer | Affected by | VCID-1asm-t31q-w3ef | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.445915+00:00 | Arch Linux Importer | Affected by | VCID-hq7v-u57f-5uhc | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.435249+00:00 | Arch Linux Importer | Affected by | VCID-6a5y-dwev-93be | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.425081+00:00 | Arch Linux Importer | Affected by | VCID-54vr-pby9-ffg7 | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.414585+00:00 | Arch Linux Importer | Affected by | VCID-z4hp-wpp1-17bu | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.404043+00:00 | Arch Linux Importer | Affected by | VCID-kxvg-qw8v-vydv | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.393128+00:00 | Arch Linux Importer | Affected by | VCID-3ega-m6fz-uugy | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.382846+00:00 | Arch Linux Importer | Affected by | VCID-hthe-t85x-13gz | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.370895+00:00 | Arch Linux Importer | Affected by | VCID-2j7g-g6dj-qydb | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.357948+00:00 | Arch Linux Importer | Affected by | VCID-pp4w-2986-nqee | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.346036+00:00 | Arch Linux Importer | Affected by | VCID-x4gg-h5q9-ufbc | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-07T13:59:10.331654+00:00 | Arch Linux Importer | Affected by | VCID-ru7n-21qs-eyfx | https://security.archlinux.org/AVG-249 | 38.1.0 |
| 2026-04-01T18:24:49.572225+00:00 | Arch Linux Importer | Affected by | VCID-q72b-g1hz-23fs | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.547976+00:00 | Arch Linux Importer | Affected by | VCID-6p3q-f7f6-mygv | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.523801+00:00 | Arch Linux Importer | Affected by | VCID-dsuj-fmtr-cbft | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.499136+00:00 | Arch Linux Importer | Affected by | VCID-yaew-dtry-pkfv | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.474181+00:00 | Arch Linux Importer | Affected by | VCID-6sun-2gu6-jqh7 | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.451502+00:00 | Arch Linux Importer | Affected by | VCID-23bx-as83-e3bv | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.426955+00:00 | Arch Linux Importer | Affected by | VCID-8wgm-j522-4yac | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.402990+00:00 | Arch Linux Importer | Affected by | VCID-rwnr-ngz9-akg1 | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.374341+00:00 | Arch Linux Importer | Affected by | VCID-jzb7-dve8-jygb | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.349422+00:00 | Arch Linux Importer | Affected by | VCID-zyxf-mxw2-4yc1 | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.325912+00:00 | Arch Linux Importer | Affected by | VCID-zr38-6kvs-ckdh | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.303096+00:00 | Arch Linux Importer | Affected by | VCID-f5dh-8kx7-vbfq | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.279584+00:00 | Arch Linux Importer | Affected by | VCID-8frm-8p43-pyh8 | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.256252+00:00 | Arch Linux Importer | Affected by | VCID-h2zq-ubdu-sqc8 | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.230918+00:00 | Arch Linux Importer | Affected by | VCID-y2dd-vp7y-5ka1 | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.205918+00:00 | Arch Linux Importer | Affected by | VCID-77xw-dvy5-5uch | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.179704+00:00 | Arch Linux Importer | Affected by | VCID-4n3b-syg9-ykh9 | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.154834+00:00 | Arch Linux Importer | Affected by | VCID-79kw-syxy-n7a1 | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.128527+00:00 | Arch Linux Importer | Affected by | VCID-3315-b7du-kydm | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.103167+00:00 | Arch Linux Importer | Affected by | VCID-f9dc-n2bd-gqdt | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.079236+00:00 | Arch Linux Importer | Affected by | VCID-c11z-6f9c-3bb5 | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.054070+00:00 | Arch Linux Importer | Affected by | VCID-q83t-h55y-eyhv | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.030696+00:00 | Arch Linux Importer | Affected by | VCID-e43t-3b7n-c3bj | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:49.006624+00:00 | Arch Linux Importer | Affected by | VCID-1asm-t31q-w3ef | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:48.980857+00:00 | Arch Linux Importer | Affected by | VCID-hq7v-u57f-5uhc | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:48.957708+00:00 | Arch Linux Importer | Affected by | VCID-6a5y-dwev-93be | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:48.934384+00:00 | Arch Linux Importer | Affected by | VCID-54vr-pby9-ffg7 | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:48.909891+00:00 | Arch Linux Importer | Affected by | VCID-z4hp-wpp1-17bu | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:48.884812+00:00 | Arch Linux Importer | Affected by | VCID-kxvg-qw8v-vydv | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:48.860818+00:00 | Arch Linux Importer | Affected by | VCID-3ega-m6fz-uugy | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:48.836149+00:00 | Arch Linux Importer | Affected by | VCID-hthe-t85x-13gz | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:48.811039+00:00 | Arch Linux Importer | Affected by | VCID-2j7g-g6dj-qydb | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:48.788372+00:00 | Arch Linux Importer | Affected by | VCID-pp4w-2986-nqee | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:48.765614+00:00 | Arch Linux Importer | Affected by | VCID-x4gg-h5q9-ufbc | https://security.archlinux.org/AVG-249 | 38.0.0 |
| 2026-04-01T18:24:48.740215+00:00 | Arch Linux Importer | Affected by | VCID-ru7n-21qs-eyfx | https://security.archlinux.org/AVG-249 | 38.0.0 |