Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/firefox@128.8.0-1?arch=el9_2
purl pkg:rpm/redhat/firefox@128.8.0-1?arch=el9_2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (9)
Vulnerability Summary Fixed by
VCID-18my-61hh-n3gb
Aliases:
CVE-2025-1934
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. There are no reported fixed by versions.
VCID-7eu3-hxbk-8fd7
Aliases:
CVE-2025-1935
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. There are no reported fixed by versions.
VCID-95vw-esba-23a2
Aliases:
CVE-2025-1937
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. There are no reported fixed by versions.
VCID-avgs-nz9j-gqg8
Aliases:
CVE-2025-1930
On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape. There are no reported fixed by versions.
VCID-pcrz-f3nj-kybr
Aliases:
CVE-2025-1938
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. There are no reported fixed by versions.
VCID-upvn-56py-8ud7
Aliases:
CVE-2025-1933
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. There are no reported fixed by versions.
VCID-w6j3-6a6j-uqf1
Aliases:
CVE-2025-1931
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. There are no reported fixed by versions.
VCID-y7sk-dmau-4fam
Aliases:
CVE-2025-1936
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. There are no reported fixed by versions.
VCID-z8cr-rten-qqg2
Aliases:
CVE-2025-1932
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:42:05.542300+00:00 RedHat Importer Affected by VCID-avgs-nz9j-gqg8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1930.json 38.0.0
2026-04-01T13:42:05.284971+00:00 RedHat Importer Affected by VCID-z8cr-rten-qqg2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1932.json 38.0.0
2026-04-01T13:42:04.999924+00:00 RedHat Importer Affected by VCID-upvn-56py-8ud7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1933.json 38.0.0
2026-04-01T13:42:04.733232+00:00 RedHat Importer Affected by VCID-w6j3-6a6j-uqf1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1931.json 38.0.0
2026-04-01T13:42:04.434076+00:00 RedHat Importer Affected by VCID-18my-61hh-n3gb https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1934.json 38.0.0
2026-04-01T13:42:04.118956+00:00 RedHat Importer Affected by VCID-7eu3-hxbk-8fd7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1935.json 38.0.0
2026-04-01T13:42:03.792539+00:00 RedHat Importer Affected by VCID-y7sk-dmau-4fam https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1936.json 38.0.0
2026-04-01T13:42:03.088977+00:00 RedHat Importer Affected by VCID-95vw-esba-23a2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1937.json 38.0.0
2026-04-01T13:42:02.330417+00:00 RedHat Importer Affected by VCID-pcrz-f3nj-kybr https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-1938.json 38.0.0