Linux · Security advisory · August 14, 2024

RHSA-2024:5391: firefox security update

RHSA-2024:5391, released August 14, 2024, fixes 11 CVEs in firefox (version 0:115.14.0-2.el8_10). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
11
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0064
50th percentile

Priority of the 11 CVEs

Patch now 0 Urgent 0 High 11 Routine 0

Fixed package versions

ProductReleaseFixed in
firefoxRHEL 80:115.14.0-2.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-7520 Mozilla Firefox ESR and 6 others: Improper Control of Generation of Code ('Code Injection') 9.6 0.0064 None reported
High CVE-2024-7522 Mozilla Firefox ESR and 6 others: Out-of-bounds Read 9.6 0.0063 None reported
High CVE-2024-7519 Mozilla Firefox ESR and 6 others: Out-of-bounds Write 9.6 0.0063 None reported
High CVE-2024-7521 Mozilla Firefox ESR and 6 others: Improper Handling of Exceptional Conditions 9.6 0.0062 None reported
High CVE-2024-7527 Mozilla Firefox ESR and 6 others: Use After Free 9.6 0.0061 None reported
High CVE-2024-7525 Mozilla Firefox ESR and 6 others: Improper Access Control 9.6 0.0060 None reported
High CVE-2024-7526 Mozilla Firefox ESR and 6 others: Use of Uninitialized Resource 9.6 0.0058 None reported
High CVE-2024-7529 Mozilla Firefox ESR and 6 others: User Interface (UI) Misrepresentation of Critical Information 9.6 0.0053 None reported
High CVE-2024-7528 Mozilla Firefox ESR and 6 others: Use After Free 9.6 0.0052 None reported
High CVE-2024-7518 Mozilla Firefox ESR and 6 others: Improper Restriction of Rendered UI Layers or Frames 9.6 0.0051 None reported
High CVE-2024-7524 Mozilla Firefox ESR and 4 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 9.6 0.0049 None reported
Showing 1 to 11 of 11 1