CVE-2024-4367

PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

8.8 HighPublic exploitFix available

CVE-2024-4367 is a high vulnerability (CVSS 8.8) in Mozilla Firefox, published May 7, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 70.7%, the 99th percentile. Fixed in pdfjs-dist 4.2.67.

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

70.7%Up 70.6 points since May 15, 2024

What each source reports

NVD Score used 8.8

Record: CVE-2024-4367
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1: 5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-754
Updated: 2026-11-02

CVE List 5.6

Record: CVE-2024-4367
CVSS 3.1: 5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-754
Updated: 2026-11-02

EUVDEUVD-2024-1831 5.6

Record: EUVD-2024-1831
CVSS 3.1: 5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-wgrm-67xf-hhpq 8.8

PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

Impact

If pdf.js is used to load a malicious PDF, and PDF.js is configured with isEvalSupported set to true (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain.

Patches

The patch removes the use of eval: https://github.com/mozilla/pdf.js/pull/18015

Workarounds

Set the option isEvalSupported to false.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1893645

Record: GHSA-wgrm-67xf-hhpq
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-754
Updated: 2026-11-02

OSV 5.6

Record: CVE-2024-4367
CVSS 3.1: 5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-4367 8.8

Record: DEBIAN-CVE-2024-4367
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 44 moreShow less

OSVGHSA-wgrm-67xf-hhpq 8.8

PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

Impact

Patches

The patch removes the use of eval: https://github.com/mozilla/pdf.js/pull/18015

Workarounds

Set the option isEvalSupported to false.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1893645

Record: GHSA-wgrm-67xf-hhpq
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-754
Updated: 2026-11-02

OSVOESA-2024-2523 8.8

firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.

Security Fix(es):Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.(CVE-2024-11692)

Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, and Thunderbird < 128.5.(CVE-2024-11694)

A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.(CVE-2024-11695)

The application failed to account for exceptions thrown by the loadManifestFromFile method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.(CVE-2024-11696)

When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.(CVE-2024-11697)

Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.(CVE-2024-11699)

Record: OESA-2024-2523
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1265 9.8

firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.

Security Fix(es):

When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox < 103.(CVE-2022-36315)

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.(CVE-2022-36316)

An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox < 104.(CVE-2022-38475)

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.(CVE-2022-45417)

If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Firefox would have kept the connection alive, making it seem like the certificate was still trusted. This vulnerability affects Firefox < 107.(CVE-2022-45419)

Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 107. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 108.(CVE-2022-46879)

Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.<br />Note: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 107. This vulnerability affects Firefox < 107.(CVE-2022-46883)

Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.(CVE-2023-25731)

The return value from gfx::SourceSurfaceSkia::Map() wasn't being verified which could have potentially lead to a null pointer dereference. This vulnerability affects Firefox < 110.(CVE-2023-25733)

An invalid downcast from nsHTMLDocument to nsIContent could have lead to undefined behavior. This vulnerability affects Firefox < 110.(CVE-2023-25736)

Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox < 111.(CVE-2023-25750)

When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox < 111.(CVE-2023-28160)

Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 111.(CVE-2023-28177)

Multiple race conditions in the font initialization could have led to memory corruption…

Record: OESA-2025-1265
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1268 9.8

firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.

Security Fix(es):

The return value from gfx::SourceSurfaceSkia::Map() wasn't being verified which could have potentially lead to a null pointer dereference. This vulnerability affects Firefox < 110.(CVE-2023-25733)

An invalid downcast from nsHTMLDocument to nsIContent could have lead to undefined behavior. This vulnerability affects Firefox < 110.(CVE-2023-25736)

Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox < 111.(CVE-2023-25750)

Multiple race conditions in the font initialization could have led to memory corruption…

Record: OESA-2025-1268
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2881 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2024:2881
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2882 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2024:2882
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2883 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2024:2883
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2884 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2024:2884
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2885 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2024:2885
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2886 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2024:2886
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2887 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2024:2887
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2888 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2024:2888
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2903 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2024:2903
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2904 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2024:2904
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2905 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2024:2905
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2906 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2024:2906
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2911 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2024:2911
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2912 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2024:2912
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2913 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2024:2913
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:3338 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2024:3338
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:3783 7.5

Red Hat Security Advisory: firefox security update

Record: RHSA-2024:3783
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:3784 7.5

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2024:3784
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:42062 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:42062
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:42088 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:42088
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:54572 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:54572
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:54634 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:54634
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:57348 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:57348
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:58550 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:58550
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:58564 8.8

Red Hat Security Advisory: webkitgtk4 security update

Record: RHSA-2026:58564
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:59325 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:59325
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:59326 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2026:59326
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:42062 8.8

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699)
webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712)
webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720)
webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721)
webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731)
webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734)
webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:42062
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:42088 8.8

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699)
webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712)
webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720)
webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721)
webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731)
webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734)
webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:42088
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-4367 8.8

Record: UBUNTU-CVE-2024-4367
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1: 5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSVALSA-2024:2883 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.11.0 ESR.

Security Fix(es):

firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767)
firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768)
firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769)
firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770)
firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:2883
Updated: 2026-11-02

OSVALSA-2024:2888 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.11.0.

Security Fix(es):

firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767)
firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768)
firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769)
firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770)
firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:2888
Updated: 2026-11-02

OSVALSA-2024:3783 No score

Moderate: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.11.0 ESR.

Security Fix(es):

firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767)
firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768)
firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769)
firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770)
firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:3783
Updated: 2026-11-02

OSVALSA-2024:3784 No score

Moderate: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.11.0.

Security Fix(es):

firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767)
firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768)
firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769)
firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770)
firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:3784
Updated: 2026-11-02

OSVALSA-2026:42062 No score

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699)
webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712)
webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720)
webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721)
webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731)
webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734)
webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:42062
Updated: 2026-11-02

OSVALSA-2026:42088 No score

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

Mozilla: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-39872)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43663)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43676)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43699)
webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43701)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43705)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43707)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43712)
webkitgtk: webkitgtk: Visiting a website may leak sensitive data (CVE-2026-43713)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43715)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43716)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43720)
webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data (CVE-2026-43721)
webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox (CVE-2026-43725)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43726)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43727)
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption (CVE-2026-43731)
webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information (CVE-2026-43732)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43734)
webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory (CVE-2026-43740)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43742)
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash (CVE-2026-43745)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:42088
Updated: 2026-11-02

OSVCLSA-2026-1775089656 No score

TuxCare security update for pdfjs-dist (1 CVE)

TuxCare rebuilt pdfjs-dist to address 1 CVE. Fixed in 3.11.174-tuxcare.1.

Record: CLSA-2026-1775089656
Updated: 2026-11-02

OSVCLSA-2026-1784987695 No score

webkit2gtk3: Fix of 25 CVEs

Rebase to webkitgtk 2.52.5 (WebKitGTK Security Advisory WSA-2026-0004), aligning with the 2.52.x security baseline shipped by RHEL 9 (RHSA-2026:42062).
CVEs resolved by this rebase: CVE-2024-4367, CVE-2026-39872, CVE-2026-43663, CVE-2026-43676, CVE-2026-43699, CVE-2026-43701, CVE-2026-43705, CVE-2026-43707, CVE-2026-43712, CVE-2026-43713, CVE-2026-43715, CVE-2026-43716, CVE-2026-43720, CVE-2026-43721, CVE-2026-43725, CVE-2026-43726, CVE-2026-43727, CVE-2026-43731, CVE-2026-43732, CVE-2026-43734, CVE-2026-43740, CVE-2026-43742, CVE-2026-43745.
Drop fix-system-malloc-llint-extractor.patch; fixed upstream in 2.52.5 (WebKit 314364@main).
Refresh the libsoup2 compat patch onto the 2.52.5 library-version context; the webkit2gtk-4.0 SONAME (libwebkit2gtk-4.0.so.37) is preserved.

Record: CLSA-2026-1784987695
Updated: 2026-11-02

OSVCLSA-2026-1784988522 No score

webkit2gtk3: Fix of 23 CVEs

Rebase to webkitgtk 2.52.5 (WebKitGTK Security Advisory WSA-2026-0004), aligning with the 2.52.x security baseline shipped by RHEL 9 (RHSA-2026:42062).
CVEs resolved by this rebase: CVE-2024-4367, CVE-2026-39872, CVE-2026-43663, CVE-2026-43676, CVE-2026-43699, CVE-2026-43701, CVE-2026-43705, CVE-2026-43707, CVE-2026-43712, CVE-2026-43713, CVE-2026-43715, CVE-2026-43716, CVE-2026-43720, CVE-2026-43721, CVE-2026-43725, CVE-2026-43726, CVE-2026-43727, CVE-2026-43731, CVE-2026-43732, CVE-2026-43734, CVE-2026-43740, CVE-2026-43742, CVE-2026-43745.
Drop fix-system-malloc-llint-extractor.patch; the upstream cherry-pick (WebKit 314364@main) is now included in 2.52.5.
Refresh libsoup2.patch for the 2.52.5 library version triplet bumps (WEBKIT 21/9/21, JAVASCRIPTCORE 10/13/10 on API 4.1; WEBKIT 20/9/16, JAVASCRIPTCORE 8/13/7 on API 6.0). The webkit2gtk-4.0 SONAME (libwebkit2gtk-4.0.so.37) is preserved.

Record: CLSA-2026-1784988522
Updated: 2026-11-02

OSVCLSA-2026-1788868464 No score

TuxCare security update for 2 packages (1 CVE)

TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 2.16.105-tuxcare.3.

Record: CLSA-2026-1788868464
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`pdfjs-dist` npm	through 4.1.392	4.2.67
`firefox` AlmaLinux:9	before 115.11.0-1.el9_4.alma.1	115.11.0-1.el9_4.alma.1
`firefox-x11` AlmaLinux:9	before 115.11.0-1.el9_4.alma.1	115.11.0-1.el9_4.alma.1
`thunderbird` AlmaLinux:9	before 115.11.0-1.el9_4.alma.1	115.11.0-1.el9_4.alma.1
`firefox` AlmaLinux:8	before 115.11.0-1.el8_10.alma.1	115.11.0-1.el8_10.alma.1
`thunderbird` AlmaLinux:8	before 115.11.0-1.el8_10.alma.1	115.11.0-1.el8_10.alma.1
`webkit2gtk3` AlmaLinux:9	before 2.52.5-1.el9_8	2.52.5-1.el9_8
`webkit2gtk3-devel` AlmaLinux:9	before 2.52.5-1.el9_8	2.52.5-1.el9_8
`webkit2gtk3-jsc` AlmaLinux:9	before 2.52.5-1.el9_8	2.52.5-1.el9_8
`webkit2gtk3-jsc-devel` AlmaLinux:9	before 2.52.5-1.el9_8	2.52.5-1.el9_8

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`webkit2gtk3` AlmaLinux:8	before 2.52.5-1.el8_10	2.52.5-1.el8_10
`webkit2gtk3-devel` AlmaLinux:8	before 2.52.5-1.el8_10	2.52.5-1.el8_10
`webkit2gtk3-jsc` AlmaLinux:8	before 2.52.5-1.el8_10	2.52.5-1.el8_10
`webkit2gtk3-jsc-devel` AlmaLinux:8	before 2.52.5-1.el8_10	2.52.5-1.el8_10
`pdfjs-dist` TuxCare:npm	3.11.174-tuxcare.0 up to 3.11.174-tuxcare.1, plus listed versions 3.11.174	3.11.174-tuxcare.1
`webkit2gtk3` TuxCare:AlmaLinux:9.6	before 2.52.5-1.el9_6.tuxcare.els6	2.52.5-1.el9_6.tuxcare.els6
`webkit2gtk3-devel` TuxCare:AlmaLinux:9.6	before 2.52.5-1.el9_6.tuxcare.els6	2.52.5-1.el9_6.tuxcare.els6
`webkit2gtk3-jsc` TuxCare:AlmaLinux:9.6	before 2.52.5-1.el9_6.tuxcare.els6	2.52.5-1.el9_6.tuxcare.els6
`webkit2gtk3-jsc-devel` TuxCare:AlmaLinux:9.6	before 2.52.5-1.el9_6.tuxcare.els6	2.52.5-1.el9_6.tuxcare.els6
`webkit2gtk3` TuxCare:AlmaLinux:9.2	before 2.52.5-1.el9.tuxcare.els10	2.52.5-1.el9.tuxcare.els10
`webkit2gtk3-devel` TuxCare:AlmaLinux:9.2	before 2.52.5-1.el9.tuxcare.els10	2.52.5-1.el9.tuxcare.els10
`webkit2gtk3-jsc` TuxCare:AlmaLinux:9.2	before 2.52.5-1.el9.tuxcare.els10	2.52.5-1.el9.tuxcare.els10
`webkit2gtk3-jsc-devel` TuxCare:AlmaLinux:9.2	before 2.52.5-1.el9.tuxcare.els10	2.52.5-1.el9.tuxcare.els10
`pdf.js` TuxCare:npm	2.16.105-tuxcare.0 up to 2.16.105-tuxcare.3, plus listed versions 2.16.1052.16.105-tuxcare.12.16.105-tuxcare.2	2.16.105-tuxcare.3
`pdfjs-dist` TuxCare:npm	2.16.105-tuxcare.0 up to 2.16.105-tuxcare.3, plus listed versions 2.16.1052.16.105-tuxcare.12.16.105-tuxcare.2	2.16.105-tuxcare.3
`firefox-esr` Debian:12	before 115.11.0esr-1~deb12u1, plus listed versions 102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1 Show 45 moreShow less 102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1115.0.2esr-1115.1.0esr-1115.10.0esr-1115.10.0esr-1~deb10u1115.10.0esr-1~deb11u1115.10.0esr-1~deb12u1115.11.0esr-1~deb10u1115.11.0esr-1~deb11u1115.2.0esr-1115.2.1esr-1115.3.0esr-1115.3.0esr-1~deb10u1115.3.0esr-1~deb11u1115.3.0esr-1~deb12u1115.3.1esr-1~deb10u1115.3.1esr-1~deb11u1115.4.0esr-1115.4.0esr-1~deb10u1115.4.0esr-1~deb11u1115.4.0esr-1~deb12u1115.5.0esr-1115.5.0esr-1~deb10u1115.5.0esr-1~deb11u1115.5.0esr-1~deb12u1115.6.0esr-1115.6.0esr-1~deb10u1115.6.0esr-1~deb11u1115.6.0esr-1~deb12u1115.7.0esr-1115.7.0esr-1~deb10u1115.7.0esr-1~deb11u1115.7.0esr-1~deb12u1	115.11.0esr-1~deb12u1
`firefox-esr` Debian:13	before 115.11.0esr-1	115.11.0esr-1
`firefox-esr` Debian:14	before 115.11.0esr-1	115.11.0esr-1
`thunderbird` Debian:12	before 1:115.11.0-1~deb12u1, plus listed versions 1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1 Show 45 moreShow less 1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.10.1-11:115.10.1-1~deb10u11:115.10.1-1~deb11u11:115.10.1-1~deb12u11:115.11.0-1~deb10u11:115.11.0-1~deb11u11:115.2.0-11:115.2.2-11:115.3.0-11:115.3.0-1~deb12u11:115.3.1-11:115.3.1-1~deb10u11:115.3.1-1~deb11u11:115.3.1-1~deb12u11:115.4.1-1	1:115.11.0-1~deb12u1
`thunderbird` Debian:13	before 1:115.11.0-1	1:115.11.0-1
`thunderbird` Debian:14	before 1:115.11.0-1	1:115.11.0-1
`webkit2gtk` Debian:12	All versions, plus listed versions 2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1 Show 45 moreShow less 2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u22.42.1-1~deb12u12.42.1-22.42.2-12.42.2-1~deb11u12.42.2-1~deb12u12.42.3-12.42.3-1~deb11u12.42.3-1~deb12u12.42.4-12.42.4-1~deb11u12.42.4-1~deb12u12.42.5-12.42.5-1~deb11u12.42.5-1~deb12u12.42.5-22.43.1-12.43.2-12.43.3-12.43.4-12.43.4-22.44.0-12.44.0-22.44.1-1	None known
`webkit2gtk` Debian:13	before 2.52.5-1~deb13u1, plus listed versions 2.48.3-12.48.5-12.48.5-1~deb11u12.48.5-1~deb12u12.48.5-1~deb13u1 Show 43 moreShow less 2.48.6-12.49.90-12.50.0-12.50.0-22.50.1-12.50.1-1~deb11u12.50.1-1~deb12u12.50.1-1~deb13u12.50.2-12.50.2-1~deb11u12.50.2-1~deb12u12.50.2-1~deb13u12.50.3-12.50.3-1+hurd.12.50.3-1~deb11u12.50.3-1~deb12u12.50.3-1~deb13u12.50.4-12.50.4-1~deb11u12.50.4-1~deb12u12.50.4-1~deb13u12.50.5-12.50.6-12.50.6-1~deb11u12.50.6-1~deb12u12.50.6-1~deb12u22.50.6-1~deb13u12.51.1-12.51.2-12.51.3-12.51.4-12.51.90-12.51.91-12.51.92-12.51.93-12.52.0-12.52.1-12.52.2-12.52.2-22.52.3-12.52.3-22.52.3-2~deb13u12.52.4-1	2.52.5-1~deb13u1
`webkit2gtk` Debian:14	before 2.52.5-1, plus listed versions 2.48.3-12.48.5-12.48.5-1~deb11u12.48.5-1~deb12u12.48.5-1~deb13u1 Show 44 moreShow less 2.48.6-12.49.90-12.50.0-12.50.0-22.50.1-12.50.1-1~deb11u12.50.1-1~deb12u12.50.1-1~deb13u12.50.2-12.50.2-1~deb11u12.50.2-1~deb12u12.50.2-1~deb13u12.50.3-12.50.3-1+hurd.12.50.3-1~deb11u12.50.3-1~deb12u12.50.3-1~deb13u12.50.4-12.50.4-1~deb11u12.50.4-1~deb12u12.50.4-1~deb13u12.50.5-12.50.6-12.50.6-1~deb11u12.50.6-1~deb12u12.50.6-1~deb12u22.50.6-1~deb13u12.51.1-12.51.2-12.51.3-12.51.4-12.51.90-12.51.91-12.51.92-12.51.93-12.52.0-12.52.1-12.52.2-12.52.2-22.52.3-12.52.3-22.52.3-2~deb13u12.52.4-12.52.5-1~deb13u1	2.52.5-1
`wpewebkit` Debian:12	All versions, plus listed versions 2.38.6-12.39.91-12.40.0-12.40.1-12.40.2-1 Show 45 moreShow less 2.40.2-22.40.3-12.40.4-12.40.5-12.42.0-12.42.1-12.42.2-12.42.3-12.42.4-12.42.5-12.42.5-1.12.42.5-1.1~exp12.42.5-1.22.42.5-2~exp2.44.1-12.44.2-12.44.2-22.44.3-12.44.4-12.46.1-12.46.2-12.46.3-12.46.4-12.46.5-12.46.6-12.48.0-12.48.1-12.48.1-22.48.2-12.48.3-12.48.5-12.48.6-12.48.6-22.50.0-12.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-2	None known
`wpewebkit` Debian:13	All versions, plus listed versions 2.48.3-12.48.5-12.48.6-12.48.6-22.50.0-1 Show 19 moreShow less 2.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-22.52.3-12.52.4-12.52.5-12.52.6-12.54.0-12.54.0-22.54.1-12.54.2-1	None known
`wpewebkit` Debian:14	before 2.52.5-1, plus listed versions 2.48.3-12.48.5-12.48.6-12.48.6-22.50.0-1 Show 13 moreShow less 2.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-22.52.3-12.52.4-1	2.52.5-1
`firefox-esr` Debian:10	before 115.11.0esr-1~deb10u1, plus listed versions 102.1.0esr-1102.1.0esr-2102.10.0esr-1102.10.0esr-1~deb10u1102.10.0esr-1~deb11u1 Show 45 moreShow less 102.11.0esr-1102.11.0esr-1~deb10u1102.11.0esr-1~deb11u1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1102.2.0esr-1102.3.0esr-1102.3.0esr-1~deb10u1102.3.0esr-1~deb10u2102.3.0esr-1~deb11u1102.4.0esr-1102.4.0esr-1~deb10u1102.4.0esr-1~deb11u1102.5.0esr-1102.5.0esr-1~deb10u1102.5.0esr-1~deb11u1102.6.0esr-1102.6.0esr-1~deb10u1102.6.0esr-1~deb11u1102.7.0esr-1102.7.0esr-1~deb10u1102.7.0esr-1~deb11u1102.8.0esr-1102.8.0esr-1~deb10u1102.8.0esr-1~deb11u1102.9.0esr-1102.9.0esr-1~deb10u1102.9.0esr-1~deb11u1102.9.0esr-2115.0.2esr-1	115.11.0esr-1~deb10u1
`thunderbird` Debian:10	before 1:115.11.0-1~deb10u1, plus listed versions 1:102.0.1-11:102.0.2-11:102.0~b4-11:102.0~b7-11:102.1.0-1 Show 45 moreShow less 1:102.1.1-11:102.1.2-11:102.10.0-11:102.10.0-1~deb10u11:102.10.0-1~deb11u11:102.11.0-11:102.11.0-1~deb10u11:102.11.0-1~deb11u11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u11:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:102.2.0-11:102.2.1-11:102.2.2-11:102.3.0-11:102.3.0-1~deb10u11:102.3.0-1~deb11u11:102.3.1-11:102.3.2-11:102.3.3-11:102.4.0-11:102.4.0-1~deb10u11:102.4.0-1~deb11u11:102.4.1-11:102.5.0-11:102.5.0-1~deb10u11:102.5.0-1~deb11u1	1:115.11.0-1~deb10u1
`firefox-esr` Debian:11	before 115.11.0esr-1~deb11u1, plus listed versions 102.1.0esr-1102.1.0esr-2102.10.0esr-1102.10.0esr-1~deb10u1102.10.0esr-1~deb11u1 Show 45 moreShow less 102.11.0esr-1102.11.0esr-1~deb10u1102.11.0esr-1~deb11u1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1102.2.0esr-1102.3.0esr-1102.3.0esr-1~deb10u1102.3.0esr-1~deb10u2102.3.0esr-1~deb11u1102.4.0esr-1102.4.0esr-1~deb10u1102.4.0esr-1~deb11u1102.5.0esr-1102.5.0esr-1~deb10u1102.5.0esr-1~deb11u1102.6.0esr-1102.6.0esr-1~deb10u1102.6.0esr-1~deb11u1102.7.0esr-1102.7.0esr-1~deb10u1102.7.0esr-1~deb11u1102.8.0esr-1102.8.0esr-1~deb10u1102.8.0esr-1~deb11u1102.9.0esr-1102.9.0esr-1~deb10u1102.9.0esr-1~deb11u1102.9.0esr-2115.0.2esr-1	115.11.0esr-1~deb11u1
`thunderbird` Debian:11	before 1:115.11.0-1~deb11u1, plus listed versions 1:102.0.1-11:102.0.2-11:102.0~b4-11:102.0~b7-11:102.1.0-1 Show 45 moreShow less 1:102.1.1-11:102.1.2-11:102.10.0-11:102.10.0-1~deb10u11:102.10.0-1~deb11u11:102.11.0-11:102.11.0-1~deb10u11:102.11.0-1~deb11u11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u11:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:102.2.0-11:102.2.1-11:102.2.2-11:102.3.0-11:102.3.0-1~deb10u11:102.3.0-1~deb11u11:102.3.1-11:102.3.2-11:102.3.3-11:102.4.0-11:102.4.0-1~deb10u11:102.4.0-1~deb11u11:102.4.1-11:102.5.0-11:102.5.0-1~deb10u11:102.5.0-1~deb11u1	1:115.11.0-1~deb11u1
`odoo` Debian:11	before 14.0.0+dfsg.2-7+deb11u2, plus listed versions 14.0.0+dfsg.2-714.0.0+dfsg.2-7+deb11u1	14.0.0+dfsg.2-7+deb11u2
`pdfjs-dist` npm	before 4.2.67	4.2.67
`nss` Mageia:9	before 3.100.0-1.mga9	3.100.0-1.mga9
`firefox` Mageia:9	before 115.11.0-1.mga9	115.11.0-1.mga9
`firefox-l10n` Mageia:9	before 115.11.0-1.mga9	115.11.0-1.mga9
`thunderbird` Mageia:9	before 115.11.0-1.mga9	115.11.0-1.mga9
`thunderbird-l10n` Mageia:9	before 115.11.0-1.mga9	115.11.0-1.mga9
`firefox` openEuler:24.03-LTS	before 128.5.0-1.oe2403	128.5.0-1.oe2403
`firefox` openEuler:22.03-LTS-SP4	before 128.8.0-1.oe2203sp4	128.8.0-1.oe2203sp4
`firefox` openEuler:22.03-LTS-SP3	before 128.8.0-1.oe2203sp3	128.8.0-1.oe2203sp3
`firefox` Red Hat:enterprise_linux:7::client	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`firefox-debuginfo` Red Hat:enterprise_linux:7::client	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`firefox` Red Hat:enterprise_linux:7::server	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`firefox-debuginfo` Red Hat:enterprise_linux:7::server	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`firefox` Red Hat:enterprise_linux:7::workstation	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`firefox-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`firefox` Red Hat:rhel_aus:8.2::appstream	before 0:115.11.0-1.el8_2	0:115.11.0-1.el8_2
`firefox-debuginfo` Red Hat:rhel_aus:8.2::appstream	before 0:115.11.0-1.el8_2	0:115.11.0-1.el8_2
`firefox-debugsource` Red Hat:rhel_aus:8.2::appstream	before 0:115.11.0-1.el8_2	0:115.11.0-1.el8_2
`firefox` Red Hat:enterprise_linux:9::appstream	before 0:115.11.0-1.el9_4	0:115.11.0-1.el9_4
`firefox-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:115.11.0-1.el9_4	0:115.11.0-1.el9_4
`firefox-debugsource` Red Hat:enterprise_linux:9::appstream	before 0:115.11.0-1.el9_4	0:115.11.0-1.el9_4
`firefox-x11` Red Hat:enterprise_linux:9::appstream	before 0:115.11.0-1.el9_4	0:115.11.0-1.el9_4
`firefox` Red Hat:rhel_eus:9.0::appstream	before 0:115.11.0-1.el9_0	0:115.11.0-1.el9_0
`firefox-debuginfo` Red Hat:rhel_eus:9.0::appstream	before 0:115.11.0-1.el9_0	0:115.11.0-1.el9_0
`firefox-debugsource` Red Hat:rhel_eus:9.0::appstream	before 0:115.11.0-1.el9_0	0:115.11.0-1.el9_0
`firefox` Red Hat:rhel_eus:8.8::appstream	before 0:115.11.0-1.el8_8	0:115.11.0-1.el8_8
`firefox-debuginfo` Red Hat:rhel_eus:8.8::appstream	before 0:115.11.0-1.el8_8	0:115.11.0-1.el8_8
`firefox-debugsource` Red Hat:rhel_eus:8.8::appstream	before 0:115.11.0-1.el8_8	0:115.11.0-1.el8_8
`firefox` Red Hat:rhel_aus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`firefox-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`firefox-debugsource` Red Hat:rhel_aus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`firefox` Red Hat:rhel_e4s:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`firefox-debuginfo` Red Hat:rhel_e4s:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`firefox-debugsource` Red Hat:rhel_e4s:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`firefox` Red Hat:rhel_tus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`firefox-debuginfo` Red Hat:rhel_tus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`firefox-debugsource` Red Hat:rhel_tus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`firefox` Red Hat:rhel_eus:8.6::appstream	before 0:115.11.0-1.el8_6	0:115.11.0-1.el8_6
`firefox-debuginfo` Red Hat:rhel_eus:8.6::appstream	before 0:115.11.0-1.el8_6	0:115.11.0-1.el8_6
`firefox-debugsource` Red Hat:rhel_eus:8.6::appstream	before 0:115.11.0-1.el8_6	0:115.11.0-1.el8_6
`thunderbird` Red Hat:enterprise_linux:9::appstream	before 0:115.11.0-1.el9_4	0:115.11.0-1.el9_4
`thunderbird-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:115.11.0-1.el9_4	0:115.11.0-1.el9_4
`thunderbird-debugsource` Red Hat:enterprise_linux:9::appstream	before 0:115.11.0-1.el9_4	0:115.11.0-1.el9_4
`thunderbird` Red Hat:rhel_eus:9.2::appstream	before 0:115.11.0-1.el9_2	0:115.11.0-1.el9_2
`thunderbird-debuginfo` Red Hat:rhel_eus:9.2::appstream	before 0:115.11.0-1.el9_2	0:115.11.0-1.el9_2
`thunderbird-debugsource` Red Hat:rhel_eus:9.2::appstream	before 0:115.11.0-1.el9_2	0:115.11.0-1.el9_2
`thunderbird` Red Hat:rhel_eus:9.0::appstream	before 0:115.11.0-1.el9_0	0:115.11.0-1.el9_0
`thunderbird-debuginfo` Red Hat:rhel_eus:9.0::appstream	before 0:115.11.0-1.el9_0	0:115.11.0-1.el9_0
`thunderbird-debugsource` Red Hat:rhel_eus:9.0::appstream	before 0:115.11.0-1.el9_0	0:115.11.0-1.el9_0
`thunderbird` Red Hat:rhel_eus:8.8::appstream	before 0:115.11.0-1.el8_8	0:115.11.0-1.el8_8
`thunderbird-debuginfo` Red Hat:rhel_eus:8.8::appstream	before 0:115.11.0-1.el8_8	0:115.11.0-1.el8_8
`thunderbird-debugsource` Red Hat:rhel_eus:8.8::appstream	before 0:115.11.0-1.el8_8	0:115.11.0-1.el8_8
`firefox` Red Hat:rhel_eus:9.2::appstream	before 0:115.11.0-1.el9_2	0:115.11.0-1.el9_2
`firefox-debuginfo` Red Hat:rhel_eus:9.2::appstream	before 0:115.11.0-1.el9_2	0:115.11.0-1.el9_2
`firefox-debugsource` Red Hat:rhel_eus:9.2::appstream	before 0:115.11.0-1.el9_2	0:115.11.0-1.el9_2
`firefox-x11` Red Hat:rhel_eus:9.2::appstream	before 0:115.11.0-1.el9_2	0:115.11.0-1.el9_2
`thunderbird` Red Hat:rhel_aus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`thunderbird-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`thunderbird-debugsource` Red Hat:rhel_aus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`thunderbird` Red Hat:rhel_e4s:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`thunderbird-debuginfo` Red Hat:rhel_e4s:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`thunderbird-debugsource` Red Hat:rhel_e4s:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`thunderbird` Red Hat:rhel_tus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`thunderbird-debuginfo` Red Hat:rhel_tus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`thunderbird-debugsource` Red Hat:rhel_tus:8.4::appstream	before 0:115.11.0-1.el8_4	0:115.11.0-1.el8_4
`thunderbird` Red Hat:rhel_eus:8.6::appstream	before 0:115.11.0-1.el8_6	0:115.11.0-1.el8_6
`thunderbird-debuginfo` Red Hat:rhel_eus:8.6::appstream	before 0:115.11.0-1.el8_6	0:115.11.0-1.el8_6
`thunderbird-debugsource` Red Hat:rhel_eus:8.6::appstream	before 0:115.11.0-1.el8_6	0:115.11.0-1.el8_6
`thunderbird` Red Hat:enterprise_linux:7::client	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`thunderbird-debuginfo` Red Hat:enterprise_linux:7::client	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`thunderbird` Red Hat:enterprise_linux:7::server	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`thunderbird-debuginfo` Red Hat:enterprise_linux:7::server	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`thunderbird` Red Hat:enterprise_linux:7::workstation	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`thunderbird-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:115.11.0-1.el7_9	0:115.11.0-1.el7_9
`thunderbird` Red Hat:rhel_aus:8.2::appstream	before 0:115.11.0-1.el8_2	0:115.11.0-1.el8_2
`thunderbird-debuginfo` Red Hat:rhel_aus:8.2::appstream	before 0:115.11.0-1.el8_2	0:115.11.0-1.el8_2
`thunderbird-debugsource` Red Hat:rhel_aus:8.2::appstream	before 0:115.11.0-1.el8_2	0:115.11.0-1.el8_2
`firefox` Red Hat:enterprise_linux:8::appstream	before 0:115.11.0-1.el8_10	0:115.11.0-1.el8_10
`firefox-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:115.11.0-1.el8_10	0:115.11.0-1.el8_10
`firefox-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:115.11.0-1.el8_10	0:115.11.0-1.el8_10
`thunderbird` Red Hat:enterprise_linux:8::appstream	before 0:115.11.0-1.el8_10	0:115.11.0-1.el8_10
`thunderbird-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:115.11.0-1.el8_10	0:115.11.0-1.el8_10
`thunderbird-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:115.11.0-1.el8_10	0:115.11.0-1.el8_10
`webkit2gtk3` Red Hat:enterprise_linux:9::appstream	before 0:2.52.5-1.el9_8	0:2.52.5-1.el9_8
`webkit2gtk3-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:2.52.5-1.el9_8	0:2.52.5-1.el9_8
`webkit2gtk3-debugsource` Red Hat:enterprise_linux:9::appstream	before 0:2.52.5-1.el9_8	0:2.52.5-1.el9_8
`webkit2gtk3-devel` Red Hat:enterprise_linux:9::appstream	before 0:2.52.5-1.el9_8	0:2.52.5-1.el9_8
`webkit2gtk3-devel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:2.52.5-1.el9_8	0:2.52.5-1.el9_8
`webkit2gtk3-jsc` Red Hat:enterprise_linux:9::appstream	before 0:2.52.5-1.el9_8	0:2.52.5-1.el9_8
`webkit2gtk3-jsc-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:2.52.5-1.el9_8	0:2.52.5-1.el9_8
`webkit2gtk3-jsc-devel` Red Hat:enterprise_linux:9::appstream	before 0:2.52.5-1.el9_8	0:2.52.5-1.el9_8
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:2.52.5-1.el9_8	0:2.52.5-1.el9_8
`webkit2gtk3` Red Hat:enterprise_linux:8::appstream	before 0:2.52.5-1.el8_10	0:2.52.5-1.el8_10
`webkit2gtk3-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.52.5-1.el8_10	0:2.52.5-1.el8_10
`webkit2gtk3-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:2.52.5-1.el8_10	0:2.52.5-1.el8_10
`webkit2gtk3-devel` Red Hat:enterprise_linux:8::appstream	before 0:2.52.5-1.el8_10	0:2.52.5-1.el8_10
`webkit2gtk3-devel-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.52.5-1.el8_10	0:2.52.5-1.el8_10
`webkit2gtk3-jsc` Red Hat:enterprise_linux:8::appstream	before 0:2.52.5-1.el8_10	0:2.52.5-1.el8_10
`webkit2gtk3-jsc-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.52.5-1.el8_10	0:2.52.5-1.el8_10
`webkit2gtk3-jsc-devel` Red Hat:enterprise_linux:8::appstream	before 0:2.52.5-1.el8_10	0:2.52.5-1.el8_10
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.52.5-1.el8_10	0:2.52.5-1.el8_10
`webkit2gtk3` Red Hat:rhel_eus:9.6::appstream	before 0:2.52.5-1.el9_6	0:2.52.5-1.el9_6
`webkit2gtk3-debuginfo` Red Hat:rhel_eus:9.6::appstream	before 0:2.52.5-1.el9_6	0:2.52.5-1.el9_6
`webkit2gtk3-debugsource` Red Hat:rhel_eus:9.6::appstream	before 0:2.52.5-1.el9_6	0:2.52.5-1.el9_6
`webkit2gtk3-devel` Red Hat:rhel_eus:9.6::appstream	before 0:2.52.5-1.el9_6	0:2.52.5-1.el9_6
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_eus:9.6::appstream	before 0:2.52.5-1.el9_6	0:2.52.5-1.el9_6
`webkit2gtk3-jsc` Red Hat:rhel_eus:9.6::appstream	before 0:2.52.5-1.el9_6	0:2.52.5-1.el9_6
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_eus:9.6::appstream	before 0:2.52.5-1.el9_6	0:2.52.5-1.el9_6
`webkit2gtk3-jsc-devel` Red Hat:rhel_eus:9.6::appstream	before 0:2.52.5-1.el9_6	0:2.52.5-1.el9_6
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_eus:9.6::appstream	before 0:2.52.5-1.el9_6	0:2.52.5-1.el9_6
`webkit2gtk3` Red Hat:rhel_e4s:9.4::appstream	before 0:2.52.5-1.el9_4	0:2.52.5-1.el9_4
`webkit2gtk3-debuginfo` Red Hat:rhel_e4s:9.4::appstream	before 0:2.52.5-1.el9_4	0:2.52.5-1.el9_4
`webkit2gtk3-debugsource` Red Hat:rhel_e4s:9.4::appstream	before 0:2.52.5-1.el9_4	0:2.52.5-1.el9_4
`webkit2gtk3-devel` Red Hat:rhel_e4s:9.4::appstream	before 0:2.52.5-1.el9_4	0:2.52.5-1.el9_4
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_e4s:9.4::appstream	before 0:2.52.5-1.el9_4	0:2.52.5-1.el9_4
`webkit2gtk3-jsc` Red Hat:rhel_e4s:9.4::appstream	before 0:2.52.5-1.el9_4	0:2.52.5-1.el9_4
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_e4s:9.4::appstream	before 0:2.52.5-1.el9_4	0:2.52.5-1.el9_4
`webkit2gtk3-jsc-devel` Red Hat:rhel_e4s:9.4::appstream	before 0:2.52.5-1.el9_4	0:2.52.5-1.el9_4
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_e4s:9.4::appstream	before 0:2.52.5-1.el9_4	0:2.52.5-1.el9_4
`webkit2gtk3` Red Hat:rhel_aus:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-debugsource` Red Hat:rhel_aus:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-devel` Red Hat:rhel_aus:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-jsc` Red Hat:rhel_aus:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-jsc-devel` Red Hat:rhel_aus:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-debugsource` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-devel` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-jsc` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-jsc-devel` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_eus_long_life:8.4::appstream	before 0:2.52.5-1.el8_4	0:2.52.5-1.el8_4
`webkit2gtk3` Red Hat:rhel_e4s:9.2::appstream	before 0:2.52.5-1.el9_2	0:2.52.5-1.el9_2
`webkit2gtk3-debuginfo` Red Hat:rhel_e4s:9.2::appstream	before 0:2.52.5-1.el9_2	0:2.52.5-1.el9_2
`webkit2gtk3-debugsource` Red Hat:rhel_e4s:9.2::appstream	before 0:2.52.5-1.el9_2	0:2.52.5-1.el9_2
`webkit2gtk3-devel` Red Hat:rhel_e4s:9.2::appstream	before 0:2.52.5-1.el9_2	0:2.52.5-1.el9_2
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_e4s:9.2::appstream	before 0:2.52.5-1.el9_2	0:2.52.5-1.el9_2
`webkit2gtk3-jsc` Red Hat:rhel_e4s:9.2::appstream	before 0:2.52.5-1.el9_2	0:2.52.5-1.el9_2
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_e4s:9.2::appstream	before 0:2.52.5-1.el9_2	0:2.52.5-1.el9_2
`webkit2gtk3-jsc-devel` Red Hat:rhel_e4s:9.2::appstream	before 0:2.52.5-1.el9_2	0:2.52.5-1.el9_2
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_e4s:9.2::appstream	before 0:2.52.5-1.el9_2	0:2.52.5-1.el9_2
`webkitgtk4` Red Hat:rhel_els:7	before 0:2.52.5-1.el7_9	0:2.52.5-1.el7_9
`webkitgtk4-debuginfo` Red Hat:rhel_els:7	before 0:2.52.5-1.el7_9	0:2.52.5-1.el7_9
`webkitgtk4-devel` Red Hat:rhel_els:7	before 0:2.52.5-1.el7_9	0:2.52.5-1.el7_9
`webkitgtk4-jsc` Red Hat:rhel_els:7	before 0:2.52.5-1.el7_9	0:2.52.5-1.el7_9
`webkitgtk4-jsc-devel` Red Hat:rhel_els:7	before 0:2.52.5-1.el7_9	0:2.52.5-1.el7_9
`webkitgtk4-doc` Red Hat:rhel_els:7	before 0:2.52.5-1.el7_9	0:2.52.5-1.el7_9
`webkit2gtk3` Red Hat:rhel_aus:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-debugsource` Red Hat:rhel_aus:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-devel` Red Hat:rhel_aus:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-jsc` Red Hat:rhel_aus:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-jsc-devel` Red Hat:rhel_aus:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-debugsource` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-devel` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-jsc` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`webkit2gtk3-jsc-devel` Red Hat:rhel_eus_long_life:8.6::appstream	before 0:2.52.5-1.el8_6	0:2.52.5-1.el8_6
`thunderbird` Rocky Linux:9	before 0:115.11.0-1.el9_4	0:115.11.0-1.el9_4
`firefox` Rocky Linux:8	before 0:115.11.0-1.el8_10	0:115.11.0-1.el8_10
`thunderbird` Rocky Linux:8	before 0:115.11.0-1.el8_10	0:115.11.0-1.el8_10
`webkit2gtk3` Rocky Linux:9	before 0:2.52.5-1.el9_8	0:2.52.5-1.el9_8
`webkit2gtk3` Rocky Linux:8	before 0:2.52.5-1.el8_10	0:2.52.5-1.el8_10
`pdfjs-dist` Root:npm	before 3.11.174-aikido.3	3.11.174-aikido.32.16.105-aikido.22.2.228-aikido.22.2.228-aikido.33.11.174-aikido.22.12.313-aikido.22.2.228-aikido.4
`@rootio/pdfjs-dist` Root:npm	before 2.2.0-root.io.1	2.2.0-root.io.13.11.0-root.io.12.12.0-root.io.13.11.174-root.io.32.16.105-root.io.22.2.228-root.io.22.2.228-root.io.33.11.174-root.io.22.12.313-root.io.22.2.228-root.io.4
`webkit2gtk` Root:Debian:12	before 2.50.6-1~deb12u2.aikido.2	2.50.6-1~deb12u2.aikido.22.50.6-1~deb12u2.aikido.32.50.6-1~deb12u2.aikido.42.50.6-1~deb12u2.aikido.52.50.6-1~deb12u2.aikido.62.50.6-1~deb12u2.aikido.7
`rootio-webkit2gtk` Root:Debian:12	before 2.50.6-1~deb12u2.aikido.2	2.50.6-1~deb12u2.aikido.22.50.6-1~deb12u2.aikido.32.50.6-1~deb12u2.aikido.42.50.6-1~deb12u2.aikido.52.50.6-1~deb12u2.aikido.62.50.6-1~deb12u2.aikido.7
`MozillaFirefox` SUSE:Linux Enterprise Software Development Kit 12 SP5	before 115.11.0-112.212.1	115.11.0-112.212.1
`MozillaFirefox` SUSE:Linux Enterprise Server 12 SP5	before 115.11.0-112.212.1	115.11.0-112.212.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 115.11.0-112.212.1	115.11.0-112.212.1
`MozillaFirefox` SUSE:Linux Enterprise Module for Desktop Applications 15 SP5	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Linux Enterprise Module for Desktop Applications 15 SP6	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Linux Enterprise Server 15 SP3-LTSS	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 15 SP3	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` SUSE:Enterprise Storage 7.1	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` openSUSE:Leap 15.5	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaFirefox` openSUSE:Leap 15.6	before 115.11.0-150200.152.137.2	115.11.0-150200.152.137.2
`MozillaThunderbird` SUSE:Linux Enterprise Module for Package Hub 15 SP5	before 115.11.0-150200.8.160.1	115.11.0-150200.8.160.1
`MozillaThunderbird` SUSE:Linux Enterprise Module for Package Hub 15 SP6	before 115.11.0-150200.8.160.1	115.11.0-150200.8.160.1
`MozillaThunderbird` SUSE:Linux Enterprise Workstation Extension 15 SP5	before 115.11.0-150200.8.160.1	115.11.0-150200.8.160.1
`MozillaThunderbird` SUSE:Linux Enterprise Workstation Extension 15 SP6	before 115.11.0-150200.8.160.1	115.11.0-150200.8.160.1
`MozillaThunderbird` openSUSE:Leap 15.5	before 115.11.0-150200.8.160.1	115.11.0-150200.8.160.1
`MozillaThunderbird` openSUSE:Leap 15.6	before 115.11.0-150200.8.160.1	115.11.0-150200.8.160.1
`webkit2gtk3` SUSE:Linux Enterprise Server 16.0	before 2.52.5-160000.1.1	2.52.5-160000.1.1
`webkit2gtk4` SUSE:Linux Enterprise Server 16.0	before 2.52.5-160000.1.1	2.52.5-160000.1.1
`webkit2gtk3` SUSE:Linux Enterprise Server for SAP applications 16.0	before 2.52.5-160000.1.1	2.52.5-160000.1.1
`webkit2gtk4` SUSE:Linux Enterprise Server for SAP applications 16.0	before 2.52.5-160000.1.1	2.52.5-160000.1.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 2.52.5-150600.12.71.1	2.52.5-150600.12.71.1
`webkit2gtk4` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 2.52.5-150600.12.71.1	2.52.5-150600.12.71.1
`webkit2gtk3` SUSE:Linux Enterprise Module for Desktop Applications 15 SP7	before 2.52.5-150600.12.71.1	2.52.5-150600.12.71.1
`webkit2gtk4` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 2.52.5-150600.12.71.1	2.52.5-150600.12.71.1
`webkit2gtk3` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 2.52.5-150600.12.71.1	2.52.5-150600.12.71.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 2.52.5-150600.12.71.1	2.52.5-150600.12.71.1
`webkit2gtk4` SUSE:Linux Enterprise Server 15 SP6-LTSS	before 2.52.5-150600.12.71.1	2.52.5-150600.12.71.1
`webkit2gtk3` SUSE:Linux Enterprise Server for SAP Applications 15 SP6	before 2.52.5-150600.12.71.1	2.52.5-150600.12.71.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server for SAP Applications 15 SP6	before 2.52.5-150600.12.71.1	2.52.5-150600.12.71.1
`webkit2gtk4` SUSE:Linux Enterprise Server for SAP Applications 15 SP6	before 2.52.5-150600.12.71.1	2.52.5-150600.12.71.1
`webkit2gtk3` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk4` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk4` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk4` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk4` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk4` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3` SUSE:Linux Enterprise Server 15 SP5-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server 15 SP5-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk4` SUSE:Linux Enterprise Server 15 SP5-LTSS	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk4` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3` SUSE:Linux Enterprise Server for SAP Applications 15 SP5	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server for SAP Applications 15 SP5	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk4` SUSE:Linux Enterprise Server for SAP Applications 15 SP5	before 2.52.5-150400.4.146.1	2.52.5-150400.4.146.1
`webkit2gtk3` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 2.52.5-4.63.2	2.52.5-4.63.2
`mozjs52` Ubuntu:18.04:LTS	All versions, plus listed versions 52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1	None known
`mozjs38` Ubuntu:18.04:LTS	All versions, plus listed versions 38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4	None known
`firefox` Ubuntu:20.04:LTS	before 126.0+build2-0ubuntu0.20.04.1, plus listed versions 69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2 Show 45 moreShow less 71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.180.0+build2-0ubuntu0.20.04.180.0.1+build1-0ubuntu0.20.04.181.0+build2-0ubuntu0.20.04.181.0.2+build1-0ubuntu0.20.04.182.0+build2-0ubuntu0.20.04.182.0.2+build1-0ubuntu0.20.04.182.0.3+build1-0ubuntu0.20.04.183.0+build2-0ubuntu0.20.04.184.0+build3-0ubuntu0.20.04.184.0.1+build1-0ubuntu0.20.04.184.0.2+build1-0ubuntu0.20.04.185.0+build1-0ubuntu0.20.04.185.0.1+build1-0ubuntu0.20.04.186.0+build3-0ubuntu0.20.04.186.0.1+build1-0ubuntu0.20.04.187.0+build3-0ubuntu0.20.04.288.0+build2-0ubuntu0.20.04.188.0.1+build1-0ubuntu0.20.04.289.0+build2-0ubuntu0.20.04.289.0.1+build1-0ubuntu0.20.04.189.0.2+build1-0ubuntu0.20.04.190.0+build1-0ubuntu0.20.04.190.0.2+build1-0ubuntu0.20.04.191.0+build2-0ubuntu0.20.04.191.0.1+build1-0ubuntu0.20.04.191.0.2+build1-0ubuntu0.20.04.192.0+build3-0ubuntu0.20.04.1	126.0+build2-0ubuntu0.20.04.1
`thunderbird` Ubuntu:20.04:LTS	before 1:115.11.0+build2-0ubuntu0.20.04.1, plus listed versions 1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1 Show 37 moreShow less 1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.11:78.7.1+build1-0ubuntu0.20.04.11:78.8.1+build1-0ubuntu0.20.04.11:78.11.0+build1-0ubuntu0.20.04.21:78.13.0+build1-0ubuntu0.20.04.21:78.14.0+build1-0ubuntu0.20.04.11:78.14.0+build1-0ubuntu0.20.04.21:91.5.0+build1-0ubuntu0.20.04.11:91.7.0+build2-0ubuntu0.20.04.11:91.8.1+build1-0ubuntu0.20.04.11:91.9.1+build1-0ubuntu0.20.04.11:91.11.0+build2-0ubuntu0.20.04.11:102.2.2+build1-0ubuntu0.20.04.11:102.4.2+build2-0ubuntu0.20.04.11:102.7.1+build2-0ubuntu0.20.04.11:102.8.0+build2-0ubuntu0.20.04.11:102.9.0+build1-0ubuntu0.20.04.11:102.10.0+build2-0ubuntu0.20.04.11:102.11.0+build1-0ubuntu0.20.04.11:102.13.0+build1-0ubuntu0.20.04.11:102.15.0+build1-0ubuntu0.20.04.11:102.15.1+build1-0ubuntu0.20.04.11:115.3.1+build1-0ubuntu0.20.04.11:115.4.1+build1-0ubuntu0.20.04.11:115.5.0+build1-0ubuntu0.20.04.11:115.6.0+build2-0ubuntu0.20.04.11:115.8.1+build1-0ubuntu0.20.04.11:115.9.0+build1-0ubuntu0.20.04.11:115.10.1+build1-0ubuntu0.20.04.1	1:115.11.0+build2-0ubuntu0.20.04.1
`mozjs68` Ubuntu:20.04:LTS	All versions, plus listed versions 68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1	None known
`mozjs52` Ubuntu:20.04:LTS	All versions, plus listed versions 52.9.1-1build152.9.1-1ubuntu3	None known
`mozjs102` Ubuntu:22.04:LTS	All versions, plus listed versions 102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1	None known
`mozjs78` Ubuntu:22.04:LTS	All versions, plus listed versions 78.13.0-178.15.0-278.15.0-4ubuntu1	None known
`mozjs91` Ubuntu:22.04:LTS	All versions, plus listed versions 91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1	None known
`thunderbird` Ubuntu:22.04:LTS	before 1:115.11.0+build2-0ubuntu0.22.04.1, plus listed versions 1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1 Show 26 moreShow less 1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.11:115.3.1+build1-0ubuntu0.22.04.21:115.4.1+build1-0ubuntu0.22.04.11:115.5.0+build1-0ubuntu0.22.04.11:115.6.0+build2-0ubuntu0.22.04.11:115.8.1+build1-0ubuntu0.22.04.11:115.9.0+build1-0ubuntu0.22.04.11:115.10.1+build1-0ubuntu0.22.04.1	1:115.11.0+build2-0ubuntu0.22.04.1
`mozjs102` Ubuntu:24.04:LTS	All versions, plus listed versions 102.15.1-1102.15.1-3ubuntu2	None known
`MozillaFirefox` openSUSE:Tumbleweed	before 126.0-1.1	126.0-1.1
`MozillaThunderbird` openSUSE:Tumbleweed	before 115.11.0-1.1	115.11.0-1.1
`firefox-esr` openSUSE:Tumbleweed	before 128.5.1-1.1	128.5.1-1.1
`webkit2gtk3` openSUSE:Leap 16.0	before 2.52.5-160000.1.1	2.52.5-160000.1.1
`webkit2gtk3-soup2` openSUSE:Leap 16.0	before 2.52.5-160000.1.1	2.52.5-160000.1.1
`webkit2gtk4` openSUSE:Leap 16.0	before 2.52.5-160000.1.1	2.52.5-160000.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	LOURC0D3/CVE-2024-4367-PoC	2024-05-20
PoC in GitHub	s4vvysec/CVE-2024-4367-POC	2024-05-20
PoC in GitHub	clarkio/pdfjs-vuln-demo	2024-05-22
PoC in GitHub	spaceraccoon/detect-cve-2024-4367	2024-05-22
PoC in GitHub	avalahEE/pdfjs_disable_eval	2024-05-23
PoC in GitHub	Zombie-Kaiser/cve-2024-4367-PoC-fixed	2024-06-13
PoC in GitHub	snyk-labs/pdfjs-vuln-demo	2024-06-17
PoC in GitHub	UnHackerEnCapital/PDFernetRemotelo	2024-06-19
PoC in GitHub	Masamuneee/CVE-2024-4367-Analysis	2024-09-04
PoC in GitHub	m0d0ri205/PDFJS	2024-10-08

Show 16 moreShow less

Public exploits
Source	Link	Date
PoC in GitHub	pedrochalegre7/CVE-2024-4367-pdf-sample	2024-11-06
PoC in GitHub	exfil0/WEAPONIZING-CVE-2024-4367	2025-01-05
PoC in GitHub	kabiri-labs/CVE-2024-4367-PoC	2025-02-17
PoC in GitHub	elamani-drawing/CVE-2024-4367-POC-PDFJS	2025-03-25
PoC in GitHub	VVeakee/CVE-2024-4367	2025-04-06
PoC in GitHub	BektiHandoyo/cve-pdf-host	2025-04-12
PoC in GitHub	Bhavyakcwestern/Hacking-pdf.js-vulnerability	2025-04-14
Exploit-DB	Firefox ESR 115.11 - PDF.js Arbitrary JavaScript execution	2025-04-22
PoC in GitHub	PenguinCabinet/CVE-2024-4367-hands-on	2025-05-16
PoC in GitHub	AnomalousVectors/cve-2024-4367-poc	2025-06-28
PoC in GitHub	0xr2r/CVE-2024-4367	2025-08-22
PoC in GitHub	1337rokudenashi/Odoo_PDFjs_CVE-2024-4367.pdf	2025-08-25
PoC in GitHub	xiaoqiesec0x1/CVE-2024-4367-PDF.js-xss	2026-05-20
PoC in GitHub	J1nKsC/CVE-2024-4367_test	2026-06-13
PoC in GitHub	veronimo669/pdf.js-CVE-2024-4367	2026-06-25
PoC in GitHub	yuimamur/CVE-2024-4367-hands-on-01	2026-07-27

Plus 5 more. The full list has every link.

History

History
When	Changed	Sources
2026-11-03	affected	OSV
2026-11-03	exploits, exploits_more
2026-11-02	created	CVE List, EUVD, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 19 package rows, 950 versions, 2,167 references and the rest of 2 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 22 source records.