Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/firefox@91.8.0-1?arch=el8_2
purl pkg:rpm/redhat/firefox@91.8.0-1?arch=el8_2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (8)
Vulnerability Summary Fixed by
VCID-4yvm-d9qr-ebaw
Aliases:
CVE-2022-1097
Multiple vulnerabilities have been discovered in NSS, the worst of which could result in arbitrary code execution. There are no reported fixed by versions.
VCID-59up-n66e-fyhx
Aliases:
CVE-2022-28281
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-hsr3-c152-nucq
Aliases:
CVE-2022-28286
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-mw9j-h66p-k7as
Aliases:
CVE-2022-28289
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-r631-9h74-sygv
Aliases:
CVE-2022-28282
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-t98b-d1uu-pkan
Aliases:
CVE-2022-1196
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-vpd3-v3fr-hkdm
Aliases:
CVE-2022-28285
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
VCID-wsdd-t7d2-gbda
Aliases:
CVE-2022-24713
GHSA-m5pq-gvj9-9vr8
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:59:05.260539+00:00 RedHat Importer Affected by VCID-mw9j-h66p-k7as https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28289.json 38.0.0
2026-04-01T13:59:04.969593+00:00 RedHat Importer Affected by VCID-wsdd-t7d2-gbda https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-24713.json 38.0.0
2026-04-01T13:59:04.692619+00:00 RedHat Importer Affected by VCID-hsr3-c152-nucq https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28286.json 38.0.0
2026-04-01T13:59:04.406733+00:00 RedHat Importer Affected by VCID-vpd3-v3fr-hkdm https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28285.json 38.0.0
2026-04-01T13:59:04.145504+00:00 RedHat Importer Affected by VCID-r631-9h74-sygv https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28282.json 38.0.0
2026-04-01T13:59:03.857505+00:00 RedHat Importer Affected by VCID-t98b-d1uu-pkan https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1196.json 38.0.0
2026-04-01T13:59:03.592805+00:00 RedHat Importer Affected by VCID-59up-n66e-fyhx https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28281.json 38.0.0
2026-04-01T13:59:03.314685+00:00 RedHat Importer Affected by VCID-4yvm-d9qr-ebaw https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1097.json 38.0.0