VulnerableCode Package Details - pkg:alpm/archlinux/firefox@91.0.2-1

Search for packages

Vulnerability	Summary	Fixed by
VCID-7fvy-7hpe-kbej Aliases: CVE-2021-38492	Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.	92.0-1 Affected by 0 other vulnerabilities.
VCID-cede-kbgf-8bgd Aliases: CVE-2021-38494	Mozilla developers Christian Holler and Lars T Hansen reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.	92.0-1 Affected by 0 other vulnerabilities.
VCID-mj2t-phst-v7f8 Aliases: CVE-2021-29993	Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs. This bug only affects Firefox for Android. Other operating systems are unaffected.	92.0-1 Affected by 0 other vulnerabilities.
VCID-zcuv-sdrv-1ffy Aliases: CVE-2021-38491	Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.	92.0-1 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-7fvy-7hpe-kbej
Aliases:
CVE-2021-38492

Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code.

92.0-1
Affected by 0 other vulnerabilities.

VCID-cede-kbgf-8bgd
Aliases:
CVE-2021-38494

Mozilla developers Christian Holler and Lars T Hansen reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

92.0-1
Affected by 0 other vulnerabilities.

VCID-mj2t-phst-v7f8
Aliases:
CVE-2021-29993

Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs. *This bug only affects Firefox for Android. Other operating systems are unaffected.*

92.0-1
Affected by 0 other vulnerabilities.

VCID-zcuv-sdrv-1ffy
Aliases:
CVE-2021-38491

Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.

92.0-1
Affected by 0 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-07T13:59:12.146468+00:00	Arch Linux Importer	Affected by	VCID-zcuv-sdrv-1ffy	https://security.archlinux.org/AVG-2350	38.1.0
2026-04-07T13:59:12.134639+00:00	Arch Linux Importer	Affected by	VCID-cede-kbgf-8bgd	https://security.archlinux.org/AVG-2350	38.1.0
2026-04-01T18:26:36.132234+00:00	Arch Linux Importer	Affected by	VCID-mj2t-phst-v7f8	https://security.archlinux.org/AVG-2351	38.0.0
2026-04-01T18:26:36.108497+00:00	Arch Linux Importer	Affected by	VCID-7fvy-7hpe-kbej	https://security.archlinux.org/AVG-2351	38.0.0
2026-04-01T18:25:24.283841+00:00	Arch Linux Importer	Affected by	VCID-zcuv-sdrv-1ffy	https://security.archlinux.org/AVG-2350	38.0.0
2026-04-01T18:25:24.254787+00:00	Arch Linux Importer	Affected by	VCID-cede-kbgf-8bgd	https://security.archlinux.org/AVG-2350	38.0.0