firefox-0:10.0.5-1.el5_8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical9high1medium1low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2012-1938US	high9.3	4.80% (92nd)	—	no fix	2012-06-05	—
CVE-2012-1941US	high9.3	4.76% (92nd)	—	no fix	2012-06-05	—
CVE-2012-1937US	high9.3	4.65% (92nd)	—	no fix	2012-06-05	—
CVE-2012-1947US	high9.3	4.58% (92nd)	—	no fix	2012-06-05	—
CVE-2012-1940US	high9.3	4.44% (91st)	—	no fix	2012-06-05	—
CVE-2012-1946US	high9.3	4.37% (91st)	—	no fix	2012-06-05	—
CVE-2012-3105US	high9.3	3.62% (89th)	—	no fix	2012-06-05	—
CVE-2012-1939US	high9.3	3.12% (88th)	—	no fix	2012-06-05	—
CVE-2012-1944US	medium4.3	1.81% (79th)	—	no fix	2012-06-05	—
CVE-2011-3101US	high10.0	1.81% (78th)	—	no fix	2012-05-16	—
CVE-2012-1945US	low2.9	0.46% (39th)	—	no fix	2012-06-05	—

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer6 CVEs
CWE-131Incorrect Calculation of Buffer Size2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-399CWE-3992 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-416Use After Free1 CVEs
CWE-787Out-of-bounds Write1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.