https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:36:31.333282+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-755 certfr-2020-avi-755 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox, Mozilla Firefox ESR et Thunderbird. Certaines d'e… 2026-10-02T19:36:32.137091+00:00 certfr-2020-avi-755 https://cve.radiocsirt.org/vuln/euvd-2026-46257 EUVD-2026-46257 2026-10-02T19:36:32.137226+00:00 EUVD-2026-46257 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26953 fkie_cve-2020-26953 2026-10-02T19:36:32.137245+00:00

It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

 https://cve.radiocsirt.org/vuln/ghsa-vw8x-xjwp-7888 GHSA-vw8x-xjwp-7888 2026-10-02T19:36:32.137287+00:00

It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

 https://cve.radiocsirt.org/vuln/gsd-2020-26953 gsd-2020-26953 2026-10-02T19:36:32.137305+00:00 gsd-2020-26953 https://cve.radiocsirt.org/vuln/oesa-2023-1672 OESA-2023-1672 — firefox security update 2026-10-02T19:36:32.137318+00:00

Affected: openEuler:20.03-LTS-SP1: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es): Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.(CVE-2020-16012) (CVE-2020-26951) (CVE-2020-26953) (CVE-2020-26956) (CVE-2020-26958) (CVE-2020-26959) (CVE-2020-26960) (CVE-2020-26961) (CVE-2020-26965)

 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2020-1 openSUSE-SU-2020:2020-1 — Security update for MozillaFirefox 2026-10-02T19:36:32.137347+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/rhsa-2020:5231 RHSA-2020:5231 — Red Hat Security Advisory: thunderbird security update 2026-10-02T19:36:32.137375+00:00

Mozilla: Variable time processing of cross-origin images during drawImage calls Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code Mozilla: Fullscreen could be enabled without displaying the security UI Mozilla: XSS through paste (manual and clipboard API) Mozilla: Requests intercepted through ServiceWorkers lacked MIME type restrictions Mozilla: Use-after-free in WebRequestService Mozilla: Potential use-after-free in uses of nsTArray Mozilla: DoH did not filter IPv4 mapped IP Addresses Mozilla: Software keyboards may have remembered typed passwords Mozilla: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5

 https://cve.radiocsirt.org/vuln/suse-su-2020:14548-1 SUSE-SU-2020:14548-1 — Security update for MozillaFirefox 2026-10-02T19:36:32.137407+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-26953 UBUNTU-CVE-2020-26953 2026-10-02T19:36:32.137428+00:00

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52

It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0337 WID-SEC-W-2026-0337 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-02T19:36:32.137465+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen, den Speicher zu korrumpieren, Daten zu manipulieren, vertrauliche Daten einzusehen, Sicherheitsmechanismen zu umgehen oder einen Cross Site Scripting Angriff durchzuführen.