https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:57:31.322770+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-448 certfr-2020-avi-448 — De multiples vulnérabilités ont été découvertes dans Mozilla Foundation Thunderbird. Elles permettent à un attaquant de… 2026-10-03T22:57:31.426897+00:00 certfr-2020-avi-448 https://cve.radiocsirt.org/vuln/cnvd-2020-54922 cnvd-2020-54922 2026-10-03T22:57:31.426951+00:00 cnvd-2020-54922 https://cve.radiocsirt.org/vuln/euvd-2026-43076 EUVD-2026-43076 2026-10-03T22:57:31.426966+00:00 EUVD-2026-43076 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15648 fkie_cve-2020-15648 2026-10-03T22:57:31.426977+00:00

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.

 https://cve.radiocsirt.org/vuln/ghsa-jrmg-2w74-rwc9 GHSA-jrmg-2w74-rwc9 2026-10-03T22:57:31.427008+00:00

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.

 https://cve.radiocsirt.org/vuln/gsd-2020-15648 gsd-2020-15648 2026-10-03T22:57:31.427024+00:00 gsd-2020-15648 https://cve.radiocsirt.org/vuln/rhsa-2020:3555 RHSA-2020:3555 — Red Hat Security Advisory: firefox security update 2026-10-03T22:57:31.427034+00:00

Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process Mozilla: Out of bound read in Date.parse() Mozilla: X-Frame-Options bypass using object or embed tags Mozilla: Bypassing iframe sandbox when allowing popups Mozilla: Custom cursor can overlay user interface Mozilla: Type confusion for special arguments in IonMonkey Mozilla: Overriding file type when saving to disk Mozilla: Attacker-induced prompt for extension installation Mozilla: Use-After-Free when aborting an operation

 https://cve.radiocsirt.org/vuln/rhsa-2020:3557 RHSA-2020:3557 — Red Hat Security Advisory: firefox security update 2026-10-03T22:57:31.427069+00:00

Mozilla: Incorrect serialization of nsIPrincipal.origin for IPv6 addresses Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process Mozilla: Out of bound read in Date.parse() Mozilla: X-Frame-Options bypass using object or embed tags Mozilla: Bypassing iframe sandbox when allowing popups Mozilla: Custom cursor can overlay user interface Mozilla: Type confusion for special arguments in IonMonkey Mozilla: Overriding file type when saving to disk Mozilla: Attacker-induced prompt for extension installation Mozilla: Use-After-Free when aborting an operation

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15648 UBUNTU-CVE-2020-15648 2026-10-03T22:57:31.427101+00:00

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0457 WID-SEC-W-2023-0457 — Mozilla Firefox/Thunderbird: Mehrere Schwachstellen 2026-10-03T22:57:31.427135+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Thunderbird ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.