https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:46:27.138573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03415 bdu:2019-03415 2026-10-03T07:46:27.253369+00:00 bdu:2019-03415 https://cve.radiocsirt.org/vuln/certfr-2018-avi-467 certfr-2018-avi-467 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Elles permettent à un attaquant de provoquer un p… 2026-10-03T07:46:27.253416+00:00 certfr-2018-avi-467 https://cve.radiocsirt.org/vuln/cnvd-2018-21817 cnvd-2018-21817 2026-10-03T07:46:27.253436+00:00 cnvd-2018-21817 https://cve.radiocsirt.org/vuln/euvd-2026-65755 EUVD-2026-65755 2026-10-03T07:46:27.253449+00:00 EUVD-2026-65755 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12387 fkie_cve-2018-12387 2026-10-03T07:46:27.253459+00:00

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.

 https://cve.radiocsirt.org/vuln/ghsa-vfrp-p8qm-9m8x GHSA-vfrp-p8qm-9m8x 2026-10-03T07:46:27.253490+00:00

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.

 https://cve.radiocsirt.org/vuln/gsd-2018-12387 gsd-2018-12387 2026-10-03T07:46:27.253507+00:00 gsd-2018-12387 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 openSUSE-SU-2024:10600-1 — MozillaFirefox-92.0-1.2 on GA media 2026-10-03T07:46:27.253518+00:00

MozillaFirefox-92.0-1.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2018:2881 RHSA-2018:2881 — Red Hat Security Advisory: firefox security update 2026-10-03T07:46:27.253939+00:00

Mozilla: type confusion in JavaScript Mozilla: stack out-of-bounds read in Array.prototype.push

 https://cve.radiocsirt.org/vuln/suse-su-2018:3476-1 SUSE-SU-2018:3476-1 — Security update for MozillaFirefox 2026-10-03T07:46:27.253958+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12387 UBUNTU-CVE-2018-12387 2026-10-03T07:46:27.253975+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.