Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/firefox@88.0.1-1
purl pkg:alpm/archlinux/firefox@88.0.1-1
Next non-vulnerable version 89.0.1-1
Latest non-vulnerable version 101.0-1
Risk 4.0
Vulnerabilities affecting this package (9)
Vulnerability Summary Fixed by
VCID-1kfj-m46a-bkd9
Aliases:
CVE-2021-29965
A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. *This bug only affects Firefox for Android. Other operating systems are unaffected.*
89.0-1
Affected by 1 other vulnerability.
VCID-2vy5-zebk-1bgk
Aliases:
CVE-2021-29961
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.
89.0-1
Affected by 1 other vulnerability.
VCID-5aga-y5nk-5fha
Aliases:
CVE-2021-29964
A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would processing incorrectly, leading to an out-of-bounds read. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*
89.0-1
Affected by 1 other vulnerability.
VCID-7knr-6rqg-8kcw
Aliases:
CVE-2021-29960
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.
89.0-1
Affected by 1 other vulnerability.
VCID-dedv-96fb-vyhp
Aliases:
CVE-2021-29967
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.
89.0-1
Affected by 1 other vulnerability.
VCID-s9ss-vz54-j3ha
Aliases:
CVE-2021-29963
Address bar search suggestions in private browsing mode were re-using session data from normal mode. *This bug only affects Firefox for Android. Other operating systems are unaffected.*
89.0-1
Affected by 1 other vulnerability.
VCID-sbyn-4c25-h7gz
Aliases:
CVE-2021-29962
Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. *This bug only affects Firefox for Android. Other operating systems are unaffected.*
89.0-1
Affected by 1 other vulnerability.
VCID-vysb-zn1g-tuf5
Aliases:
CVE-2021-29966
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.
89.0-1
Affected by 1 other vulnerability.
VCID-y2pv-1tm3-nqak
Aliases:
CVE-2021-29959
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.
89.0-1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ndp1-5bhw-8kau When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code. CVE-2021-29952

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-07T13:59:12.459389+00:00 Arch Linux Importer Fixing VCID-ndp1-5bhw-8kau https://security.archlinux.org/AVG-1917 38.1.0
2026-04-07T13:59:12.439842+00:00 Arch Linux Importer Affected by VCID-y2pv-1tm3-nqak https://security.archlinux.org/AVG-2018 38.1.0
2026-04-07T13:59:12.426699+00:00 Arch Linux Importer Affected by VCID-7knr-6rqg-8kcw https://security.archlinux.org/AVG-2018 38.1.0
2026-04-07T13:59:12.412877+00:00 Arch Linux Importer Affected by VCID-2vy5-zebk-1bgk https://security.archlinux.org/AVG-2018 38.1.0
2026-04-07T13:59:12.399305+00:00 Arch Linux Importer Affected by VCID-vysb-zn1g-tuf5 https://security.archlinux.org/AVG-2018 38.1.0
2026-04-07T13:59:12.384508+00:00 Arch Linux Importer Affected by VCID-dedv-96fb-vyhp https://security.archlinux.org/AVG-2018 38.1.0
2026-04-01T18:25:34.685646+00:00 Arch Linux Importer Fixing VCID-ndp1-5bhw-8kau https://security.archlinux.org/AVG-1917 38.0.0
2026-04-01T18:25:32.243433+00:00 Arch Linux Importer Affected by VCID-y2pv-1tm3-nqak https://security.archlinux.org/AVG-2018 38.0.0
2026-04-01T18:25:32.220578+00:00 Arch Linux Importer Affected by VCID-7knr-6rqg-8kcw https://security.archlinux.org/AVG-2018 38.0.0
2026-04-01T18:25:32.195695+00:00 Arch Linux Importer Affected by VCID-2vy5-zebk-1bgk https://security.archlinux.org/AVG-2018 38.0.0
2026-04-01T18:25:32.170665+00:00 Arch Linux Importer Affected by VCID-vysb-zn1g-tuf5 https://security.archlinux.org/AVG-2018 38.0.0
2026-04-01T18:25:32.146443+00:00 Arch Linux Importer Affected by VCID-dedv-96fb-vyhp https://security.archlinux.org/AVG-2018 38.0.0
2026-04-01T18:25:32.120503+00:00 Arch Linux Importer Affected by VCID-sbyn-4c25-h7gz https://security.archlinux.org/AVG-2019 38.0.0
2026-04-01T18:25:32.096809+00:00 Arch Linux Importer Affected by VCID-s9ss-vz54-j3ha https://security.archlinux.org/AVG-2019 38.0.0
2026-04-01T18:25:32.071494+00:00 Arch Linux Importer Affected by VCID-5aga-y5nk-5fha https://security.archlinux.org/AVG-2019 38.0.0
2026-04-01T18:25:32.047197+00:00 Arch Linux Importer Affected by VCID-1kfj-m46a-bkd9 https://security.archlinux.org/AVG-2019 38.0.0