https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:50:57.054941+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03561 bdu:2019-03561 2026-10-02T23:50:57.164253+00:00 bdu:2019-03561 https://cve.radiocsirt.org/vuln/certfr-2019-avi-236 certfr-2019-avi-236 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-02T23:50:57.164305+00:00 certfr-2019-avi-236 https://cve.radiocsirt.org/vuln/cnvd-2019-17477 cnvd-2019-17477 2026-10-02T23:50:57.164327+00:00 cnvd-2019-17477 https://cve.radiocsirt.org/vuln/euvd-2026-54566 EUVD-2026-54566 2026-10-02T23:50:57.164340+00:00 EUVD-2026-54566 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11698 fkie_cve-2019-11698 2026-10-02T23:50:57.164351+00:00

If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user's browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

 https://cve.radiocsirt.org/vuln/ghsa-28hh-9xvh-vcr3 GHSA-28hh-9xvh-vcr3 2026-10-02T23:50:57.164382+00:00

If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user's browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

 https://cve.radiocsirt.org/vuln/gsd-2019-11698 gsd-2019-11698 2026-10-02T23:50:57.164399+00:00 gsd-2019-11698 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1534-1 openSUSE-SU-2019:1534-1 — Security update for MozillaFirefox 2026-10-02T23:50:57.164409+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/rhsa-2019:1267 RHSA-2019:1267 — Red Hat Security Advisory: firefox security update 2026-10-02T23:50:57.164436+00:00

mozilla: Cross-origin theft of images with ImageBitmapRenderingContext chromium-browser: Out of bounds read in Skia libpng: use-after-free in png_image_free in png.c Mozilla: Cross-origin theft of images with createImageBitmap Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 Mozilla: Type confusion with object groups and UnboxedObjects Mozilla: Stealing of cross-domain images using canvas Mozilla: Compartment mismatch with fetch API Mozilla: Use-after-free of ChromeEventHandler by DocShell Mozilla: Use-after-free in XMLHttpRequest Mozilla: Use-after-free removing listeners in the event listener manager Mozilla: Buffer overflow in WebGL bufferdata on Linux Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks

 https://cve.radiocsirt.org/vuln/suse-su-2019:1388-1 SUSE-SU-2019:1388-1 — Security update for MozillaFirefox 2026-10-02T23:50:57.164472+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11698 UBUNTU-CVE-2019-11698 2026-10-02T23:50:57.164492+00:00

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52

If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user's browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.