The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:8293 advisory.

    * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details     (CVE-2025-5267)
      * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)
      * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)
      * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)
      * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content     (CVE-2025-5263)
      * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9 : firefox (ALSA-2025:8293)

medium Nessus Plugin ID 237520

Version 1.1