Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/firefox@70.0.1-3
purl pkg:alpm/archlinux/firefox@70.0.1-3
Next non-vulnerable version 72.0.1-1
Latest non-vulnerable version 101.0-1
Risk 4.5
Vulnerabilities affecting this package (10)
Vulnerability Summary Fixed by
VCID-3smq-ax5u-ryd3
Aliases:
CVE-2019-17012
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.
71.0-1
Affected by 7 other vulnerabilities.
VCID-4sv2-j8zg-xkhf
Aliases:
CVE-2019-17009
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater service. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.*
71.0-1
Affected by 7 other vulnerabilities.
VCID-8xkk-qc7d-fqg2
Aliases:
CVE-2019-17013
Mozilla developers and community members Philipp, Diego Calleja, Mikhail Gavrilov, Jason Kratzer, Christian Holler, Markus Stange, Tyson Smith reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
71.0-1
Affected by 7 other vulnerabilities.
VCID-ex1b-2rdy-7qhw
Aliases:
CVE-2019-17005
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.
71.0-1
Affected by 7 other vulnerabilities.
VCID-ftfg-b795-qyan
Aliases:
CVE-2019-17014
If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-domain, resulting in a cross-origin information leak.
71.0-1
Affected by 7 other vulnerabilities.
VCID-n6s1-tsx2-7fee
Aliases:
CVE-2019-11756
Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service).
71.0-1
Affected by 7 other vulnerabilities.
VCID-pws7-8qmm-hfes
Aliases:
CVE-2019-17008
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.
71.0-1
Affected by 7 other vulnerabilities.
VCID-vzb9-aeqz-hybr
Aliases:
CVE-2019-11745
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.
71.0-1
Affected by 7 other vulnerabilities.
VCID-zh2m-qyw5-dkgn
Aliases:
CVE-2019-17011
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.
71.0-1
Affected by 7 other vulnerabilities.
VCID-zstj-sux9-ubdd
Aliases:
CVE-2019-17010
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.
71.0-1
Affected by 7 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-07T13:59:07.674858+00:00 Arch Linux Importer Affected by VCID-vzb9-aeqz-hybr https://security.archlinux.org/AVG-1071 38.1.0
2026-04-07T13:59:07.662056+00:00 Arch Linux Importer Affected by VCID-n6s1-tsx2-7fee https://security.archlinux.org/AVG-1071 38.1.0
2026-04-07T13:59:07.647855+00:00 Arch Linux Importer Affected by VCID-ex1b-2rdy-7qhw https://security.archlinux.org/AVG-1071 38.1.0
2026-04-07T13:59:07.634956+00:00 Arch Linux Importer Affected by VCID-pws7-8qmm-hfes https://security.archlinux.org/AVG-1071 38.1.0
2026-04-07T13:59:07.622762+00:00 Arch Linux Importer Affected by VCID-4sv2-j8zg-xkhf https://security.archlinux.org/AVG-1071 38.1.0
2026-04-07T13:59:07.611369+00:00 Arch Linux Importer Affected by VCID-zstj-sux9-ubdd https://security.archlinux.org/AVG-1071 38.1.0
2026-04-07T13:59:07.599364+00:00 Arch Linux Importer Affected by VCID-zh2m-qyw5-dkgn https://security.archlinux.org/AVG-1071 38.1.0
2026-04-07T13:59:07.584708+00:00 Arch Linux Importer Affected by VCID-3smq-ax5u-ryd3 https://security.archlinux.org/AVG-1071 38.1.0
2026-04-07T13:59:07.571392+00:00 Arch Linux Importer Affected by VCID-8xkk-qc7d-fqg2 https://security.archlinux.org/AVG-1071 38.1.0
2026-04-07T13:59:07.557729+00:00 Arch Linux Importer Affected by VCID-ftfg-b795-qyan https://security.archlinux.org/AVG-1071 38.1.0
2026-04-01T18:24:26.575031+00:00 Arch Linux Importer Affected by VCID-vzb9-aeqz-hybr https://security.archlinux.org/AVG-1071 38.0.0
2026-04-01T18:24:26.550843+00:00 Arch Linux Importer Affected by VCID-n6s1-tsx2-7fee https://security.archlinux.org/AVG-1071 38.0.0
2026-04-01T18:24:26.526724+00:00 Arch Linux Importer Affected by VCID-ex1b-2rdy-7qhw https://security.archlinux.org/AVG-1071 38.0.0
2026-04-01T18:24:26.504842+00:00 Arch Linux Importer Affected by VCID-pws7-8qmm-hfes https://security.archlinux.org/AVG-1071 38.0.0
2026-04-01T18:24:26.480650+00:00 Arch Linux Importer Affected by VCID-4sv2-j8zg-xkhf https://security.archlinux.org/AVG-1071 38.0.0
2026-04-01T18:24:26.455981+00:00 Arch Linux Importer Affected by VCID-zstj-sux9-ubdd https://security.archlinux.org/AVG-1071 38.0.0
2026-04-01T18:24:26.432781+00:00 Arch Linux Importer Affected by VCID-zh2m-qyw5-dkgn https://security.archlinux.org/AVG-1071 38.0.0
2026-04-01T18:24:26.409578+00:00 Arch Linux Importer Affected by VCID-3smq-ax5u-ryd3 https://security.archlinux.org/AVG-1071 38.0.0
2026-04-01T18:24:26.387663+00:00 Arch Linux Importer Affected by VCID-8xkk-qc7d-fqg2 https://security.archlinux.org/AVG-1071 38.0.0
2026-04-01T18:24:26.363106+00:00 Arch Linux Importer Affected by VCID-ftfg-b795-qyan https://security.archlinux.org/AVG-1071 38.0.0