firefox-0:91.5.0-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical5high6medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-4140US	critical10.0	1.41% (72nd)	—	no fix	2022-12-22	—
CVE-2022-22738US	high8.8	1.03% (64th)	—	no fix	2022-12-22	—
CVE-2022-22740US	high8.8	1.01% (63rd)	—	no fix	2022-12-22	—
CVE-2022-22751US	high8.8	0.92% (60th)	—	no fix	2022-12-22	—
CVE-2022-22742US	medium6.5	0.85% (58th)	—	no fix	2022-12-22	—
CVE-2022-22737US	high7.5	0.78% (56th)	—	no fix	2022-12-22	—
CVE-2022-22748US	medium6.5	0.77% (55th)	—	no fix	2022-12-22	—
CVE-2022-22739US	medium6.5	0.71% (53rd)	—	no fix	2022-12-22	—
CVE-2022-22741US	high7.5	0.69% (53rd)	—	no fix	2022-12-22	—
CVE-2022-22743US	medium4.3	0.69% (52nd)	—	no fix	2022-12-22	—
CVE-2022-22745US	medium6.5	0.68% (52nd)	—	no fix	2022-12-22	—
CVE-2022-22747US	medium6.5	0.67% (52nd)	—	no fix	2022-12-22	—

The flaw types (CWEs) most of these CVEs share.

CWE-1021Improper Restriction of Rendered UI Layers or Frames5 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-254CWE-2542 CVEs
CWE-416Use After Free2 CVEs
CWE-112Missing XML Validation1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-125Out-of-bounds Read1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.