https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:32:55.782369+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-01411 bdu:2020-01411 2026-10-02T19:32:55.935366+00:00 bdu:2020-01411 https://cve.radiocsirt.org/vuln/certfr-2019-avi-421 certfr-2019-avi-421 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-02T19:32:55.935418+00:00 certfr-2019-avi-421 https://cve.radiocsirt.org/vuln/cnvd-2019-32242 cnvd-2019-32242 2026-10-02T19:32:55.935439+00:00 cnvd-2019-32242 https://cve.radiocsirt.org/vuln/euvd-2026-53123 EUVD-2026-53123 2026-10-02T19:32:55.935451+00:00 EUVD-2026-53123 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9812 fkie_cve-2019-9812 2026-10-02T19:32:55.935463+00:00

Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR < 60.9, Firefox ESR < 68.1, and Firefox < 69.

 https://cve.radiocsirt.org/vuln/ghsa-jh9w-r6qf-jxc5 GHSA-jh9w-r6qf-jxc5 2026-10-02T19:32:55.935494+00:00

Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR < 60.9, Firefox ESR < 68.1, and Firefox < 69.

 https://cve.radiocsirt.org/vuln/gsd-2019-9812 gsd-2019-9812 2026-10-02T19:32:55.935513+00:00 gsd-2019-9812 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2251-1 openSUSE-SU-2019:2251-1 — Security update for MozillaFirefox 2026-10-02T19:32:55.935523+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/rhsa-2019:2694 RHSA-2019:2694 — Red Hat Security Advisory: firefox security update 2026-10-02T19:32:55.935564+00:00

Mozilla: Sandbox escape through Firefox Sync firefox: stored passwords in 'Saved Logins' can be copied without master password entry Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9 Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images Mozilla: Cross-origin access to unload event attributes Mozilla: XSS by breaking out of title and textarea elements using innerHTML Mozilla: Use-after-free while manipulating video Mozilla: Use-after-free while extracting a key value in IndexedDB

 https://cve.radiocsirt.org/vuln/suse-su-2019:14173-1 SUSE-SU-2019:14173-1 — Security update for MozillaFirefox, firefox-glib2, firefox-gtk3 2026-10-02T19:32:55.935593+00:00

Security update for MozillaFirefox, firefox-glib2, firefox-gtk3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9812 UBUNTU-CVE-2019-9812 2026-10-02T19:32:55.935613+00:00

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52

Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR < 60.9, Firefox ESR < 68.1, and Firefox < 69.