Affected packages
- firefox— before 140.13.0-1.el9_8.alma.1
- firefox-x11— before 140.13.0-1.el9_8.alma.1
Exploit signal
- Known exploited (CISA KEV)
- No
- EPSS score
- —
- EPSS percentile
- —
EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.
Sources
- https://access.redhat.com/errata/RHSA-2026:47104
- https://access.redhat.com/security/cve/CVE-2026-15718
- https://access.redhat.com/security/cve/CVE-2026-15719
- https://access.redhat.com/security/cve/CVE-2026-16349
- https://access.redhat.com/security/cve/CVE-2026-16350
- https://access.redhat.com/security/cve/CVE-2026-16351
- https://access.redhat.com/security/cve/CVE-2026-16352
- https://access.redhat.com/security/cve/CVE-2026-16353
- https://access.redhat.com/security/cve/CVE-2026-16354
- https://access.redhat.com/security/cve/CVE-2026-16355
- https://access.redhat.com/security/cve/CVE-2026-16356
- https://access.redhat.com/security/cve/CVE-2026-16357
- https://access.redhat.com/security/cve/CVE-2026-16358
- https://access.redhat.com/security/cve/CVE-2026-16359
- https://access.redhat.com/security/cve/CVE-2026-16360
- https://access.redhat.com/security/cve/CVE-2026-16361
- https://access.redhat.com/security/cve/CVE-2026-16362
- https://access.redhat.com/security/cve/CVE-2026-16363
- https://access.redhat.com/security/cve/CVE-2026-16368
- https://access.redhat.com/security/cve/CVE-2026-16369
- https://access.redhat.com/security/cve/CVE-2026-16371
- https://access.redhat.com/security/cve/CVE-2026-16374
- https://access.redhat.com/security/cve/CVE-2026-16375
- https://access.redhat.com/security/cve/CVE-2026-16377
- https://access.redhat.com/security/cve/CVE-2026-16379
- https://access.redhat.com/security/cve/CVE-2026-16381
- https://access.redhat.com/security/cve/CVE-2026-16383
- https://access.redhat.com/security/cve/CVE-2026-16387
- https://access.redhat.com/security/cve/CVE-2026-16390
- https://access.redhat.com/security/cve/CVE-2026-16391
- https://access.redhat.com/security/cve/CVE-2026-16396
- https://access.redhat.com/security/cve/CVE-2026-16405
- https://access.redhat.com/security/cve/CVE-2026-16412
- https://access.redhat.com/security/cve/CVE-2026-56208
- https://bugzilla.redhat.com/2490799
- https://bugzilla.redhat.com/2499973
- https://bugzilla.redhat.com/2499974
- https://bugzilla.redhat.com/2503415
- https://bugzilla.redhat.com/2503416
- https://bugzilla.redhat.com/2503420
- https://bugzilla.redhat.com/2503423
- https://bugzilla.redhat.com/2503425
- https://bugzilla.redhat.com/2503430
- https://bugzilla.redhat.com/2503432
- https://bugzilla.redhat.com/2503434
- https://bugzilla.redhat.com/2503439
- https://bugzilla.redhat.com/2503440
- https://bugzilla.redhat.com/2503444
- https://bugzilla.redhat.com/2503451
- https://bugzilla.redhat.com/2503454
- https://bugzilla.redhat.com/2503456
- https://bugzilla.redhat.com/2503463
- https://bugzilla.redhat.com/2503472
- https://bugzilla.redhat.com/2503473
- https://bugzilla.redhat.com/2503485
- https://bugzilla.redhat.com/2503489
- https://bugzilla.redhat.com/2503491
- https://bugzilla.redhat.com/2503497
- https://bugzilla.redhat.com/2503498
- https://bugzilla.redhat.com/2503500
- https://bugzilla.redhat.com/2503501
- https://bugzilla.redhat.com/2503505
- https://bugzilla.redhat.com/2503512
- https://bugzilla.redhat.com/2503513
- https://bugzilla.redhat.com/2503517
- https://bugzilla.redhat.com/2503521
- https://bugzilla.redhat.com/2503527
- https://errata.almalinux.org/9/ALSA-2026-47104.html
Structured record: https://osv.dev/vulnerability/ALSA-2026:47104
Recommended response stack
Snyk — Scan your dependencies in CI and fix this vulnerability.→Socket — Detect malicious and compromised packages before they ship.→
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.
Get incidents like this as alerts for your stack.
Join the beta