Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/firefox@81.0.2-1
purl pkg:alpm/archlinux/firefox@81.0.2-1
Next non-vulnerable version 82.0-1
Latest non-vulnerable version 101.0-1
Risk 4.5
Vulnerabilities affecting this package (7)
Vulnerability Summary Fixed by
VCID-1q54-juu2-xbat
Aliases:
CVE-2020-15683
Multiple vulnerabilities have been found in Mozilla Firefox and Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.
82.0-1
Affected by 0 other vulnerabilities.
VCID-8ckv-8maw-k3af
Aliases:
CVE-2020-15681
When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash.
82.0-1
Affected by 0 other vulnerabilities.
VCID-9z19-npd3-sbar
Aliases:
CVE-2020-15682
When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin.
82.0-1
Affected by 0 other vulnerabilities.
VCID-m1pc-eqy5-2khu
Aliases:
CVE-2020-15680
If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered.
82.0-1
Affected by 0 other vulnerabilities.
VCID-ndex-79sm-gfak
Aliases:
CVE-2020-15684
Mozilla developers Christian Holler, Sebastian Hengst, Bogdan Tara, and Tyson Smith reported memory safety bugs present in Firefox 81. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
82.0-1
Affected by 0 other vulnerabilities.
VCID-unmm-942j-gkh7
Aliases:
CVE-2020-15254
GHSA-v5m7-53cv-f3hx
crossbeam-channel Undefined Behavior before v0.4.4 ### Impact The affected version of this crate's the `bounded` channel incorrectly assumes that `Vec::from_iter` has allocated capacity that same as the number of iterator elements. `Vec::from_iter` does not actually guarantee that and may allocate extra memory. The destructor of the `bounded` channel reconstructs `Vec` from the raw pointer based on the incorrect assumes described above. This is unsound and causing deallocation with the incorrect capacity when `Vec::from_iter` has allocated different sizes with the number of iterator elements. ### Patches This has been fixed in crossbeam-channel 0.4.4. We recommend users to upgrade to 0.4.4. ### References See https://github.com/crossbeam-rs/crossbeam/pull/533, https://github.com/crossbeam-rs/crossbeam/issues/539, and https://github.com/RustSec/advisory-db/pull/425 for more details. ### License This advisory is in the public domain.
82.0-1
Affected by 0 other vulnerabilities.
VCID-uwzy-pbnf-kkfw
Aliases:
CVE-2020-15969
Multiple vulnerabilities have been found in Mozilla Firefox and Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.
82.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-07T13:59:07.044237+00:00 Arch Linux Importer Affected by VCID-unmm-942j-gkh7 https://security.archlinux.org/AVG-1256 38.1.0
2026-04-07T13:59:07.031550+00:00 Arch Linux Importer Affected by VCID-m1pc-eqy5-2khu https://security.archlinux.org/AVG-1256 38.1.0
2026-04-07T13:59:07.017539+00:00 Arch Linux Importer Affected by VCID-8ckv-8maw-k3af https://security.archlinux.org/AVG-1256 38.1.0
2026-04-07T13:59:07.004256+00:00 Arch Linux Importer Affected by VCID-9z19-npd3-sbar https://security.archlinux.org/AVG-1256 38.1.0
2026-04-07T13:59:06.989696+00:00 Arch Linux Importer Affected by VCID-1q54-juu2-xbat https://security.archlinux.org/AVG-1256 38.1.0
2026-04-07T13:59:06.977983+00:00 Arch Linux Importer Affected by VCID-ndex-79sm-gfak https://security.archlinux.org/AVG-1256 38.1.0
2026-04-07T13:59:06.964318+00:00 Arch Linux Importer Affected by VCID-uwzy-pbnf-kkfw https://security.archlinux.org/AVG-1256 38.1.0
2026-04-01T18:24:20.306944+00:00 Arch Linux Importer Affected by VCID-unmm-942j-gkh7 https://security.archlinux.org/AVG-1256 38.0.0
2026-04-01T18:24:20.280312+00:00 Arch Linux Importer Affected by VCID-m1pc-eqy5-2khu https://security.archlinux.org/AVG-1256 38.0.0
2026-04-01T18:24:20.250866+00:00 Arch Linux Importer Affected by VCID-8ckv-8maw-k3af https://security.archlinux.org/AVG-1256 38.0.0
2026-04-01T18:24:20.222033+00:00 Arch Linux Importer Affected by VCID-9z19-npd3-sbar https://security.archlinux.org/AVG-1256 38.0.0
2026-04-01T18:24:20.195137+00:00 Arch Linux Importer Affected by VCID-1q54-juu2-xbat https://security.archlinux.org/AVG-1256 38.0.0
2026-04-01T18:24:20.166173+00:00 Arch Linux Importer Affected by VCID-ndex-79sm-gfak https://security.archlinux.org/AVG-1256 38.0.0
2026-04-01T18:24:20.130705+00:00 Arch Linux Importer Affected by VCID-uwzy-pbnf-kkfw https://security.archlinux.org/AVG-1256 38.0.0