https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:22:36.919972+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04300 bdu:2019-04300 2026-10-02T16:22:37.006796+00:00 bdu:2019-04300 https://cve.radiocsirt.org/vuln/certfr-2018-avi-510 certfr-2018-avi-510 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-02T16:22:37.006841+00:00 certfr-2018-avi-510 https://cve.radiocsirt.org/vuln/cnvd-2018-22935 cnvd-2018-22935 2026-10-02T16:22:37.006861+00:00 cnvd-2018-22935 https://cve.radiocsirt.org/vuln/euvd-2026-65773 EUVD-2026-65773 2026-10-02T16:22:37.006873+00:00 EUVD-2026-65773 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12397 fkie_cve-2018-12397 2026-10-02T16:22:37.006884+00:00

A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websites" being displayed to the user. This allows extensions to run content scripts in local pages without permission warnings when a local file is opened. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63.

 https://cve.radiocsirt.org/vuln/ghsa-xxh5-92qj-c4gh GHSA-xxh5-92qj-c4gh 2026-10-02T16:22:37.006915+00:00

A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websites" being displayed to the user. This allows extensions to run content scripts in local pages without permission warnings when a local file is opened. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63.

 https://cve.radiocsirt.org/vuln/gsd-2018-12397 gsd-2018-12397 2026-10-02T16:22:37.006931+00:00 gsd-2018-12397 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 openSUSE-SU-2024:10600-1 — MozillaFirefox-92.0-1.2 on GA media 2026-10-02T16:22:37.006942+00:00

MozillaFirefox-92.0-1.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2018:3006 RHSA-2018:3006 — Red Hat Security Advisory: firefox security update 2026-10-02T16:22:37.007413+00:00

Mozilla: Memory safety bugs fixed in Firefox ESR 60.3 Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3 Mozilla: Crash with nested event loops Mozilla: Integer overflow during Unicode conversion while loading JavaScript Mozilla: WebExtension bypass of domain restrictions through header rewriting Mozilla: WebExtension content scripts can execute in disallowed contexts Mozilla: WebExtension local file permission check bypass

 https://cve.radiocsirt.org/vuln/suse-su-2018:3656-1 SUSE-SU-2018:3656-1 — Security update for MozillaFirefox 2026-10-02T16:22:37.007442+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12397 UBUNTU-CVE-2018-12397 2026-10-02T16:22:37.007461+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52

A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websites" being displayed to the user. This allows extensions to run content scripts in local pages without permission warnings when a local file is opened. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63.