Affected packages
- firefox— before 140.14.0-1.el8_10.alma.1
Exploit signal
- Known exploited (CISA KEV)
- No
- EPSS score
- —
- EPSS percentile
- —
EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.
Sources
- https://access.redhat.com/errata/RHSA-2026:58898
- https://access.redhat.com/security/cve/CVE-2026-74934
- https://access.redhat.com/security/cve/CVE-2026-74935
- https://access.redhat.com/security/cve/CVE-2026-74936
- https://access.redhat.com/security/cve/CVE-2026-74939
- https://access.redhat.com/security/cve/CVE-2026-74940
- https://access.redhat.com/security/cve/CVE-2026-74941
- https://access.redhat.com/security/cve/CVE-2026-74942
- https://access.redhat.com/security/cve/CVE-2026-74943
- https://access.redhat.com/security/cve/CVE-2026-74944
- https://access.redhat.com/security/cve/CVE-2026-74945
- https://access.redhat.com/security/cve/CVE-2026-74946
- https://access.redhat.com/security/cve/CVE-2026-74948
- https://access.redhat.com/security/cve/CVE-2026-74949
- https://access.redhat.com/security/cve/CVE-2026-74953
- https://access.redhat.com/security/cve/CVE-2026-74957
- https://access.redhat.com/security/cve/CVE-2026-74959
- https://access.redhat.com/security/cve/CVE-2026-74960
- https://access.redhat.com/security/cve/CVE-2026-74962
- https://access.redhat.com/security/cve/CVE-2026-74963
- https://access.redhat.com/security/cve/CVE-2026-74964
- https://access.redhat.com/security/cve/CVE-2026-74965
- https://access.redhat.com/security/cve/CVE-2026-74967
- https://access.redhat.com/security/cve/CVE-2026-74969
- https://access.redhat.com/security/cve/CVE-2026-74971
- https://access.redhat.com/security/cve/CVE-2026-74972
- https://access.redhat.com/security/cve/CVE-2026-74973
- https://access.redhat.com/security/cve/CVE-2026-74974
- https://access.redhat.com/security/cve/CVE-2026-74976
- https://access.redhat.com/security/cve/CVE-2026-74983
- https://access.redhat.com/security/cve/CVE-2026-74987
- https://access.redhat.com/security/cve/CVE-2026-74990
- https://bugzilla.redhat.com/2517819
- https://bugzilla.redhat.com/2517820
- https://bugzilla.redhat.com/2517822
- https://bugzilla.redhat.com/2517823
- https://bugzilla.redhat.com/2517825
- https://bugzilla.redhat.com/2517826
- https://bugzilla.redhat.com/2517831
- https://bugzilla.redhat.com/2517833
- https://bugzilla.redhat.com/2517834
- https://bugzilla.redhat.com/2517835
- https://bugzilla.redhat.com/2517836
- https://bugzilla.redhat.com/2517837
- https://bugzilla.redhat.com/2517839
- https://bugzilla.redhat.com/2517840
- https://bugzilla.redhat.com/2517841
- https://bugzilla.redhat.com/2517845
- https://bugzilla.redhat.com/2517846
- https://bugzilla.redhat.com/2517849
- https://bugzilla.redhat.com/2517851
- https://bugzilla.redhat.com/2517853
- https://bugzilla.redhat.com/2517856
- https://bugzilla.redhat.com/2517858
- https://bugzilla.redhat.com/2517859
- https://bugzilla.redhat.com/2517860
- https://bugzilla.redhat.com/2517862
- https://bugzilla.redhat.com/2517863
- https://bugzilla.redhat.com/2517866
- https://bugzilla.redhat.com/2517868
- https://bugzilla.redhat.com/2517870
- https://bugzilla.redhat.com/2517872
- https://bugzilla.redhat.com/2517874
- https://errata.almalinux.org/8/ALSA-2026-58898.html
Structured record: https://osv.dev/vulnerability/ALSA-2026:58898
Recommended response stack
Snyk — Scan your dependencies in CI and fix this vulnerability.→Socket — Detect malicious and compromised packages before they ship.→
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.
Get incidents like this as alerts for your stack.
Join the beta