https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:57:25.081232+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-143 certfr-2021-avi-143 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Elles permettent à un attaquant de provoquer une… 2026-10-03T14:57:25.276649+00:00 certfr-2021-avi-143 https://cve.radiocsirt.org/vuln/cnvd-2021-29479 cnvd-2021-29479 2026-10-03T14:57:25.276701+00:00 cnvd-2021-29479 https://cve.radiocsirt.org/vuln/euvd-2026-23444 EUVD-2026-23444 2026-10-03T14:57:25.276718+00:00 EUVD-2026-23444 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23976 fkie_cve-2021-23976 2026-10-03T14:57:25.276730+00:00

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on targeted websites. Note: This issue is a different issue from CVE-2020-26954 and only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 86.

 https://cve.radiocsirt.org/vuln/ghsa-q9m5-5m39-7whx GHSA-q9m5-5m39-7whx 2026-10-03T14:57:25.276764+00:00

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on targeted websites. Note: This issue is a different issue from CVE-2020-26954 and only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 86.

 https://cve.radiocsirt.org/vuln/gsd-2021-23976 gsd-2021-23976 2026-10-03T14:57:25.276783+00:00 gsd-2021-23976 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 openSUSE-SU-2024:10600-1 — MozillaFirefox-92.0-1.2 on GA media 2026-10-03T14:57:25.276794+00:00

MozillaFirefox-92.0-1.2 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23976 UBUNTU-CVE-2021-23976 2026-10-03T14:57:25.277199+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs78

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on targeted websites. Note: This issue is a different issue from CVE-2020-26954 and only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 86.