Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/firefox@91.7.0-3?arch=el8_4
purl pkg:rpm/redhat/firefox@91.7.0-3?arch=el8_4
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (10)
Vulnerability Summary Fixed by
VCID-1erb-xc8r-8kfm
Aliases:
CVE-2022-26384
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-cqpd-wav4-pubn
Aliases:
CVE-2022-26381
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-cy2n-zexk-jyda
Aliases:
CVE-2022-25315
Multiple vulnerabilities have been discovered in Expat, the worst of which could result in arbitrary code execution. There are no reported fixed by versions.
VCID-mddr-7zar-6kfn
Aliases:
CVE-2022-25236
Multiple vulnerabilities have been discovered in Expat, the worst of which could result in arbitrary code execution. There are no reported fixed by versions.
VCID-mwd4-pgxg-zkha
Aliases:
CVE-2022-26485
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-nw7y-2xct-8fa5
Aliases:
CVE-2022-25235
Multiple vulnerabilities have been discovered in Expat, the worst of which could result in arbitrary code execution. There are no reported fixed by versions.
VCID-pzf5-v82a-hkb9
Aliases:
CVE-2022-26486
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-qh4a-bn9p-a7hh
Aliases:
CVE-2022-26387
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-wqb6-fpwk-ekgy
Aliases:
CVE-2022-26386
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-ztmj-vavn-8kdf
Aliases:
CVE-2022-26383
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:59:35.508229+00:00 RedHat Importer Affected by VCID-mddr-7zar-6kfn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-25236.json 38.0.0
2026-04-01T13:59:34.327969+00:00 RedHat Importer Affected by VCID-nw7y-2xct-8fa5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-25235.json 38.0.0
2026-04-01T13:59:33.438103+00:00 RedHat Importer Affected by VCID-cy2n-zexk-jyda https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-25315.json 38.0.0
2026-04-01T13:59:28.996802+00:00 RedHat Importer Affected by VCID-mwd4-pgxg-zkha https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26485.json 38.0.0
2026-04-01T13:59:28.731596+00:00 RedHat Importer Affected by VCID-pzf5-v82a-hkb9 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26486.json 38.0.0
2026-04-01T13:59:27.757641+00:00 RedHat Importer Affected by VCID-wqb6-fpwk-ekgy https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26386.json 38.0.0
2026-04-01T13:59:27.462705+00:00 RedHat Importer Affected by VCID-cqpd-wav4-pubn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26381.json 38.0.0
2026-04-01T13:59:27.172032+00:00 RedHat Importer Affected by VCID-qh4a-bn9p-a7hh https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26387.json 38.0.0
2026-04-01T13:59:26.896409+00:00 RedHat Importer Affected by VCID-1erb-xc8r-8kfm https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26384.json 38.0.0
2026-04-01T13:59:26.635086+00:00 RedHat Importer Affected by VCID-ztmj-vavn-8kdf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-26383.json 38.0.0