https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:07:49.094262+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04379 bdu:2021-04379 2026-10-03T04:07:49.322541+00:00 bdu:2021-04379 https://cve.radiocsirt.org/vuln/certfr-2019-avi-421 certfr-2019-avi-421 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-03T04:07:49.322591+00:00 certfr-2019-avi-421 https://cve.radiocsirt.org/vuln/cnvd-2019-30440 cnvd-2019-30440 2026-10-03T04:07:49.322612+00:00 cnvd-2019-30440 https://cve.radiocsirt.org/vuln/euvd-2026-54563 EUVD-2026-54563 2026-10-03T04:07:49.322625+00:00 EUVD-2026-54563 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11736 fkie_cve-2019-11736 2026-10-03T04:07:49.322635+00:00

The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. <br>*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

 https://cve.radiocsirt.org/vuln/ghsa-g4fc-6wpg-63m2 GHSA-g4fc-6wpg-63m2 2026-10-03T04:07:49.322669+00:00

The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. <br>*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

 https://cve.radiocsirt.org/vuln/gsd-2019-11736 gsd-2019-11736 2026-10-03T04:07:49.322688+00:00 gsd-2019-11736 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2251-1 openSUSE-SU-2019:2251-1 — Security update for MozillaFirefox 2026-10-03T04:07:49.322699+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 SUSE-SU-2019:14246-1 — Security update for Mozilla Firefox 2026-10-03T04:07:49.322730+00:00

Security update for Mozilla Firefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11736 UBUNTU-CVE-2019-11736 2026-10-03T04:07:49.322803+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52

The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. <br>*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.