BlackTreeIndependent security intelligence

Full vulnerability report · 2024

CVE-2024-4367High confidence

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context

Mozilla · Firefox

8.8HighCVSS 3.1

Recommended action

Within 7 days

High technical severity with public exploit material referenced by a structured source; prioritise exposed affected systems while verifying vendor guidance.

Patch available

Distribution package intelligence

Ubuntu vendor package status

Canonical’s release and source-package findings are shown separately from local repository availability.

1 package state

Repository candidate not checked

A published vendor fix does not prove that a matching update is enabled and installable on a particular asset. Confirm the local package candidate before scheduling remediation.

Ubuntu release	Source package	Vendor state	Fixed version	Evidence
Ubuntu 24.04 LTSnoble · standard archive	`mozjs102`	Under evaluationCanonical reports that the package might be affected and still needs evaluation or fixing.	`Not published in this feed`	Canonical record ↗Source updated 4 Sept 2026

Direct vendor intelligence

Authoritative vendor CSAF and VEX advisories

Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.

2 current

CVE-2024-4367 · CSAF 2.0 · revision 3 · finalRed Hat Product SecurityMozilla: Arbitrary JavaScript execution in PDF.js

10 known affected

The vendor explicitly identifies these products as affected by this CVE.

firefox as a component of Red Hat Enterprise Linux 6
firefox.src as a component of Red Hat Enterprise Linux 6
pywebkitgtk.src as a component of Red Hat Enterprise Linux 6
thunderbird as a component of Red Hat Enterprise Linux 6
thunderbird.src as a component of Red Hat Enterprise Linux 6
libwebkit2gtk as a component of Red Hat Enterprise Linux 7
webkitgtk3 as a component of Red Hat Enterprise Linux 7
webkitgtk3-devel as a component of Red Hat Enterprise Linux 7
webkitgtk3-doc as a component of Red Hat Enterprise Linux 7
webkitgtk3.src as a component of Red Hat Enterprise Linux 7

Summary: A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context.
Remediation: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

SSA-827383 · CSAF 2.0 · revision 1 · interimSiemens ProductCERTSSA-827383: Multiple Vulnerabilities in Teamcenter

2 known affected

The vendor explicitly identifies these products as affected by this CVE.

Teamcenter V2312
Teamcenter V2406

Summary: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
Remediation: Update to V2312.0009 or later version

Official European source

ENISA European Vulnerability Database

Official EUVD identifiers, advisory evidence and known-exploited context. Missing fields are not treated as evidence of low risk.

1 current

ENISA EUVD identifier

EUVD-2024-1831

No EUVD known-exploited evidence

ENISA has published the identifier mapping but no EUVD description has been stored yet.

EUVD state: Present in the current official mapping
Known exploitation: Not present in the current ENISA EUVD known-exploited dataset. This is not proof of no exploitation.
ENISA score: Not supplied in the stored EUVD record
Advisory evidence: No linked advisory details stored yet

Recommended actionWithin 7 days

High technical severity with public exploit material referenced by a structured source; prioritise exposed affected systems while verifying vendor guidance.

Patch available

What, why and how

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

What

Why

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

How

An attacker operating through a network path may attempt exploitation without authentication after a user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.

What

Why

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

How

Exploit reality and attack path

CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.

Observed exploitation

Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.

No confirmed evidence

No CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.

Public PoC / exploit material

Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.

Reference recorded

CISA Vulnrichment records proof-of-concept exploitation in its SSVC data. BlackTree has not independently executed or validated exploit material.

Likely attack path: a network path → Improper Check for Unusual or Exceptional Conditions → cause the confidentiality, integrity or availability impact described by the vendor
Attack surface: Network
Privileges required: None: unauthenticated exploitation is possible
User interaction: Required interaction required
Attack complexity: Low: no specialised conditions are recorded
Security boundary: Unchanged: impact remains within the vulnerable component's security authority
Weakness ? CWE means Common Weakness Enumeration: a standard category for the underlying weakness.: CWE-754 ↗
CWE-754: Improper Check for Unusual or Exceptional Conditions. The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
CVSS vector ? CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Common Vulnerability Scoring System 3.1: the compact vector below is decoded into plain language.
AVNetworkAttack vector: The vulnerable component can be reached over a network.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.PRNonePrivileges required: The attacker does not need an account or existing privileges.UIRequiredUser interaction: Another user must perform an action for exploitation to succeed.SUnchangedScope: The security impact remains within the vulnerable component's authority.CHighConfidentiality impact: A successful attack can cause a major loss.IHighIntegrity impact: A successful attack can cause a major loss.AHighAvailability impact: A successful attack can cause a major loss.
Post-exploitation / living off the land: No specific living-off-the-land technique is confirmed in the structured sources. Monitor normal administration tools for activity inconsistent with the affected service's baseline.

NetworkUnauthenticatedCWE-754Public exploit reference

Official authority intelligence

Only matched European and national findings are included. Language selectors and unavailable sources are omitted.

ENISA EUVD · EUVD-2024-1831Official EUVD mapping

0 linked advisory records.

Official EUVD record

BSI · German · WID-SEC-W-2024-1605Fabasoft Folio: Schwachstelle ermöglicht Codeausführung

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Fabasoft Folio ausnutzen, um beliebigen Programmcode auszuführen.

Official advisory

BSI · German · WID-SEC-W-2024-1216GitLab: Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Cross-Site-Scripting-Angriff (XSS) durchzuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.

Official advisory

BSI · German · WID-SEC-W-2024-1151Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting (XSS)-Angriffe durchzuführen.

Official advisory

BSI · German · WID-SEC-W-2026-2358WebKitGTK: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen daten zu manipulieren und Sicherheitsvorkehrungen zu umgehen

Official advisory

CERT-FR · French · CERTFR-2024-AVI-1103Multiples vulnérabilités dans les produits IBM

ecord?id=CVE-2024-36138 Référence CVE CVE-2024-37372 https://www.cve.org/CVERecord?id=CVE-2024-37372 Référence CVE CVE-2024-37890 https://www.cve.org/CVERecord?id=CVE-2024-37890 Référence CVE CVE-2024-38337 https://www.cve.org/CVERecord?id=CVE-2024-38337 Référence CVE CVE-2024-39008 https://www.cve.org/CVERecord?id=CVE-2024-39008 Référence CVE CVE-2024-39338 https://www.cve.org/CVERecord?id=CVE-2024-39338 Référence CVE CVE-2024-4067 https://www.cve.org/CVERecord?id=CVE-2024-4067 Référence CVE CVE-2024-4068 https://www.cve.org/CVERecord?id=CVE-2024-4068 Référence CVE CVE-2024-41752 https://www.cve.org/CVERecord?id=CVE-2024-41752 Référence CVE CVE-2024-4367 https://www.cve.org/CVERecord?id=CVE-2024-4367 Référence CVE CVE-2024-43796 https://www.cve.org/CVERecord?id=CVE-2024-43796 Référence CVE CVE-2024-45082 https://www.cve.org/CVERecord?id=CVE-2024-45082 Référence CVE CVE-2024-45296 https://www.cve.org/CVERecord?id=CVE-2024-45296 Référence CVE CVE-2024-45590 https://www.cve.org/CVERecord?id=CVE-2024-45590 Référence CVE CVE-2024-51504 https://www.cve.org/CVERecord?id=CVE-2024-51504 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-7006 https://www.cve.org/CVERecord?id=CVE-2024-7006 Référence CVE CVE-2024-7264 https://www.cve.org/CVERecord?id=CVE-20

Official advisory

CERT-FR · French · CERTFR-2024-AVI-0890Multiples vulnérabilités dans les produits Atlassian

De multiples vulnérabilités ont été découvertes dans les produits Atlassian. Elles permettent à un attaquant de provoquer un déni de service à distance, une injection de code indirecte à distance (XSS) et un contournement de la politique de sécurité.

Official advisory

CERT-FR · French · CERTFR-2024-AVI-0433Multiples vulnérabilités dans GitLab

De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).

Official advisory

CERT-FR · French · CERTFR-2024-AVI-0396Multiples vulnérabilités dans les produits Mozilla

De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.

Official advisory

NBSZ-NKI · Hungarian · cve-2024-4367CVE-2024-4367

Magas

Official advisory

NCSC-NL · Dutch · NCSC-2026-0147Kwetsbaarheden verholpen in Siemens-producten

A missing type check in PDF.js font handling in Mozilla Firefox, Firefox ESR, and Thunderbird allows arbitrary JavaScript execution, affecting versions prior to Firefox 126, ESR 115.11, and Thunderbird 115.11.

Official advisory

NCSC-NL · Dutch · NCSC-2024-0218Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird

Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Omzeilen van beveiligingsmaatregel - (Remote) code execution (Gebruikersrechten)

Official advisory

Patch and workaround

Operational remediation based on structured source evidence.

Status ? Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.: Patch available
Affected: firefox as a component of Red Hat Enterprise Linux 6; firefox.src as a component of Red Hat Enterprise Linux 6; pywebkitgtk.src as a component of Red Hat Enterprise Linux 6; thunderbird as a component of Red Hat Enterprise Linux 6; thunderbird.src as a component of Red Hat Enterprise Linux 6; libwebkit2gtk as a component of Red Hat Enterprise Linux 7; webkitgtk3 as a component of Red Hat Enterprise Linux 7; webkitgtk3-devel as a component of Red Hat Enterprise Linux 7; webkitgtk3-doc as a component of Red Hat Enterprise Linux 7; webkitgtk3.src as a component of Red Hat Enterprise Linux 7
Fixed: firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); webkitgtk4-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-devel-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-devel-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-devel-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); and 575 more
Action: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
Workaround: No verified workaround is recorded. If business-safe, reduce exposure to the affected interface and allow only trusted sources until authoritative guidance is available.

Evidence and provenance

Published 14 May 2024 · Last source change 12 May 2026, 11:30 UTC · CWE-754 · Improper Check for Unusual or Exceptional Conditions

CVE recordCVE.org · 5.2

CVSS sourceNIST NVD

EPSS source

The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.

FIRST · tracked since 2026-08-14

European sourceENISA EUVD · EUVD-2024-1831

Product sourceVendor CSAF · Red Hat Product Security

Remediation sourceVendor CSAF · Red Hat Product Security

CWE sourceCISA ADP

NVD statusNVD modified after enrichment

Core structured fields are present and their contributing authorities are shown above.

Material change intelligence

What changed after publication

View recent updates →

25 Aug 2026, 07:54 UTC
Affected versionsThe structured affected or fixed version information changed.
Before
firefox as a component of Red Hat Enterprise Linux 6; firefox.src as a component of Red Hat Enterprise Linux 6; pywebkitgtk.src as a component of Red Hat Enterprise Linux 6; thunderbird as a component of Red Hat Enterprise Linux 6; thunderbird.src as a component of Red Hat Enterprise Linux 6; libwebkit2gtk as a component of Red Hat Enterprise Linux 7; webkitgtk3 as a component of Red Hat Enterprise Linux 7; webkitgtk3-devel as a component of Red Hat Enterprise Linux 7; webkitgtk3-doc as a component of Red Hat Enterprise Linux 7; webkitgtk3.src as a component of Red Hat Enterprise Linux 7 · Fixed: firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); webkitgtk4-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-devel-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-devel-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-devel-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); and 490 more
After
firefox as a component of Red Hat Enterprise Linux 6; firefox.src as a component of Red Hat Enterprise Linux 6; pywebkitgtk.src as a component of Red Hat Enterprise Linux 6; thunderbird as a component of Red Hat Enterprise Linux 6; thunderbird.src as a component of Red Hat Enterprise Linux 6; libwebkit2gtk as a component of Red Hat Enterprise Linux 7; webkitgtk3 as a component of Red Hat Enterprise Linux 7; webkitgtk3-devel as a component of Red Hat Enterprise Linux 7; webkitgtk3-doc as a component of Red Hat Enterprise Linux 7; webkitgtk3.src as a component of Red Hat Enterprise Linux 7 · Fixed: firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); webkitgtk4-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-devel-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-devel-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-devel-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); and 575 more
Red Hat Product Security ↗
24 Aug 2026, 07:57 UTC
Affected versionsThe structured affected or fixed version information changed.
Before
firefox as a component of Red Hat Enterprise Linux 6; firefox.src as a component of Red Hat Enterprise Linux 6; pywebkitgtk.src as a component of Red Hat Enterprise Linux 6; thunderbird as a component of Red Hat Enterprise Linux 6; thunderbird.src as a component of Red Hat Enterprise Linux 6; libwebkit2gtk as a component of Red Hat Enterprise Linux 7; webkitgtk3 as a component of Red Hat Enterprise Linux 7; webkitgtk3-devel as a component of Red Hat Enterprise Linux 7; webkitgtk3-doc as a component of Red Hat Enterprise Linux 7; webkitgtk3.src as a component of Red Hat Enterprise Linux 7; webkitgtk4 as a component of Red Hat Enterprise Linux 7; webkitgtk4-devel as a component of Red Hat Enterprise Linux 7; webkitgtk4-doc as a component of Red Hat Enterprise Linux 7; webkitgtk4-jsc as a component of Red Hat Enterprise Linux 7; webkitgtk4-jsc-devel as a component of Red Hat Enterprise Linux 7; webkitgtk4-plugin-process-gtk2 as a component of Red Hat Enterprise Linux 7; webkitgtk4.src as a component of Red Hat Enterprise Linux 7 · Fixed: firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); and 472 more
After
firefox as a component of Red Hat Enterprise Linux 6; firefox.src as a component of Red Hat Enterprise Linux 6; pywebkitgtk.src as a component of Red Hat Enterprise Linux 6; thunderbird as a component of Red Hat Enterprise Linux 6; thunderbird.src as a component of Red Hat Enterprise Linux 6; libwebkit2gtk as a component of Red Hat Enterprise Linux 7; webkitgtk3 as a component of Red Hat Enterprise Linux 7; webkitgtk3-devel as a component of Red Hat Enterprise Linux 7; webkitgtk3-doc as a component of Red Hat Enterprise Linux 7; webkitgtk3.src as a component of Red Hat Enterprise Linux 7 · Fixed: firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); webkitgtk4-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-debuginfo-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-devel-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-devel-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-0:2.52.5-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); webkitgtk4-jsc-devel-0:2.52.5-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); and 490 more
Red Hat Product Security ↗
24 Aug 2026, 02:10 UTC
Affected versionsThe structured affected or fixed version information changed.
Before
firefox as a component of Red Hat Enterprise Linux 6; firefox.src as a component of Red Hat Enterprise Linux 6; pywebkitgtk.src as a component of Red Hat Enterprise Linux 6; thunderbird as a component of Red Hat Enterprise Linux 6; thunderbird.src as a component of Red Hat Enterprise Linux 6; libwebkit2gtk as a component of Red Hat Enterprise Linux 7; webkitgtk3 as a component of Red Hat Enterprise Linux 7; webkitgtk3-devel as a component of Red Hat Enterprise Linux 7; webkitgtk3-doc as a component of Red Hat Enterprise Linux 7; webkitgtk3.src as a component of Red Hat Enterprise Linux 7; webkitgtk4 as a component of Red Hat Enterprise Linux 7; webkitgtk4-devel as a component of Red Hat Enterprise Linux 7; webkitgtk4-doc as a component of Red Hat Enterprise Linux 7; webkitgtk4-jsc as a component of Red Hat Enterprise Linux 7; webkitgtk4-jsc-devel as a component of Red Hat Enterprise Linux 7; webkitgtk4-plugin-process-gtk2 as a component of Red Hat Enterprise Linux 7; webkitgtk4.src as a component of Red Hat Enterprise Linux 7 · Fixed: firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); and 426 more
After
firefox as a component of Red Hat Enterprise Linux 6; firefox.src as a component of Red Hat Enterprise Linux 6; pywebkitgtk.src as a component of Red Hat Enterprise Linux 6; thunderbird as a component of Red Hat Enterprise Linux 6; thunderbird.src as a component of Red Hat Enterprise Linux 6; libwebkit2gtk as a component of Red Hat Enterprise Linux 7; webkitgtk3 as a component of Red Hat Enterprise Linux 7; webkitgtk3-devel as a component of Red Hat Enterprise Linux 7; webkitgtk3-doc as a component of Red Hat Enterprise Linux 7; webkitgtk3.src as a component of Red Hat Enterprise Linux 7; webkitgtk4 as a component of Red Hat Enterprise Linux 7; webkitgtk4-devel as a component of Red Hat Enterprise Linux 7; webkitgtk4-doc as a component of Red Hat Enterprise Linux 7; webkitgtk4-jsc as a component of Red Hat Enterprise Linux 7; webkitgtk4-jsc-devel as a component of Red Hat Enterprise Linux 7; webkitgtk4-plugin-process-gtk2 as a component of Red Hat Enterprise Linux 7; webkitgtk4.src as a component of Red Hat Enterprise Linux 7 · Fixed: firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); and 472 more
Red Hat Product Security ↗
20 Aug 2026, 07:34 UTC
Affected versionsThe structured affected or fixed version information changed.
Before
firefox as a component of Red Hat Enterprise Linux 6; firefox.src as a component of Red Hat Enterprise Linux 6; pywebkitgtk.src as a component of Red Hat Enterprise Linux 6; thunderbird as a component of Red Hat Enterprise Linux 6; thunderbird.src as a component of Red Hat Enterprise Linux 6; libwebkit2gtk as a component of Red Hat Enterprise Linux 7; webkitgtk3 as a component of Red Hat Enterprise Linux 7; webkitgtk3-devel as a component of Red Hat Enterprise Linux 7; webkitgtk3-doc as a component of Red Hat Enterprise Linux 7; webkitgtk3.src as a component of Red Hat Enterprise Linux 7; webkitgtk4 as a component of Red Hat Enterprise Linux 7; webkitgtk4-devel as a component of Red Hat Enterprise Linux 7; webkitgtk4-doc as a component of Red Hat Enterprise Linux 7; webkitgtk4-jsc as a component of Red Hat Enterprise Linux 7; webkitgtk4-jsc-devel as a component of Red Hat Enterprise Linux 7; webkitgtk4-plugin-process-gtk2 as a component of Red Hat Enterprise Linux 7; webkitgtk4.src as a component of Red Hat Enterprise Linux 7 · Fixed: firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); and 388 more
After
firefox as a component of Red Hat Enterprise Linux 6; firefox.src as a component of Red Hat Enterprise Linux 6; pywebkitgtk.src as a component of Red Hat Enterprise Linux 6; thunderbird as a component of Red Hat Enterprise Linux 6; thunderbird.src as a component of Red Hat Enterprise Linux 6; libwebkit2gtk as a component of Red Hat Enterprise Linux 7; webkitgtk3 as a component of Red Hat Enterprise Linux 7; webkitgtk3-devel as a component of Red Hat Enterprise Linux 7; webkitgtk3-doc as a component of Red Hat Enterprise Linux 7; webkitgtk3.src as a component of Red Hat Enterprise Linux 7; webkitgtk4 as a component of Red Hat Enterprise Linux 7; webkitgtk4-devel as a component of Red Hat Enterprise Linux 7; webkitgtk4-doc as a component of Red Hat Enterprise Linux 7; webkitgtk4-jsc as a component of Red Hat Enterprise Linux 7; webkitgtk4-jsc-devel as a component of Red Hat Enterprise Linux 7; webkitgtk4-plugin-process-gtk2 as a component of Red Hat Enterprise Linux 7; webkitgtk4.src as a component of Red Hat Enterprise Linux 7 · Fixed: firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7); firefox-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7); firefox-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7); firefox-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7); firefox-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); firefox-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-0:115.11.0-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); thunderbird-debuginfo-0:115.11.0-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7); and 426 more
Red Hat Product Security ↗

2024-05-14CVE published

ENISA EUVD · EUVD-2024-1831↗Vendor CSAF · Red Hat Product Security↗CISA Vulnrichment SSVC evidence↗Vendor advisory↗Vendor advisory↗Vendor advisory↗CVE authority or vendor reference↗Official CVE record (CNA and ADP data)↗NVD record↗

Technical terms and abbreviations used in this report

CVE: Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS: Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS: Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE: Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA: CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP: Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD: National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT: A computer security incident response team that publishes warnings or coordinates incident response.
PoC: Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF: Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL: Living off the land: abuse of legitimate tools or system functions during an attack.

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context

National CERT insights ?CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.

EUVD-2024-1831

What, why and how

Exploit reality and attack path

Official authority intelligence

Patch and workaround

Evidence and provenance

National CERT insights
?
CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.