https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:12:18.414091+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-02077 bdu:2021-02077 2026-10-04T02:12:18.577521+00:00 bdu:2021-02077 https://cve.radiocsirt.org/vuln/certfr-2021-avi-248 certfr-2021-avi-248 — De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Elles permettent à un attaquant de provoquer… 2026-10-04T02:12:18.577562+00:00 certfr-2021-avi-248 https://cve.radiocsirt.org/vuln/cnvd-2021-28298 cnvd-2021-28298 2026-10-04T02:12:18.577582+00:00 cnvd-2021-28298 https://cve.radiocsirt.org/vuln/euvd-2026-23455 EUVD-2026-23455 2026-10-04T02:12:18.577594+00:00 EUVD-2026-23455 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23991 fkie_cve-2021-23991 2026-10-04T02:12:18.577605+00:00

If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice's key with an invalid subkey, Thunderbird might subsequently attempt to use the invalid subkey, and will fail to send encrypted email to Alice. This vulnerability affects Thunderbird < 78.9.1.

 https://cve.radiocsirt.org/vuln/ghsa-x5j6-p8w8-5r65 GHSA-x5j6-p8w8-5r65 2026-10-04T02:12:18.577635+00:00

If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice's key with an invalid subkey, Thunderbird might subsequently attempt to use the invalid subkey, and will fail to send encrypted email to Alice. This vulnerability affects Thunderbird < 78.9.1.

 https://cve.radiocsirt.org/vuln/gsd-2021-23991 gsd-2021-23991 2026-10-04T02:12:18.577653+00:00 gsd-2021-23991 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0580-1 openSUSE-SU-2021:0580-1 — Security update for MozillaThunderbird 2026-10-04T02:12:18.577663+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/rhsa-2021:1190 RHSA-2021:1190 — Red Hat Security Advisory: thunderbird security update 2026-10-04T02:12:18.577684+00:00

Mozilla: An attacker may use Thunderbird's OpenPGP key refresh mechanism to poison an existing key Mozilla: A crafted OpenPGP key with an invalid user ID could be used to confuse the user Mozilla: Inability to send encrypted OpenPGP email after importing a crafted OpenPGP key Mozilla: Thunderbird might execute an alternative OTR library Mozilla: Logic issue potentially leaves key material unlocked

 https://cve.radiocsirt.org/vuln/suse-su-2021:1167-1 SUSE-SU-2021:1167-1 — Security update for MozillaThunderbird 2026-10-04T02:12:18.577709+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23991 UBUNTU-CVE-2021-23991 2026-10-04T02:12:18.577724+00:00

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird

If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice's key with an invalid subkey, Thunderbird might subsequently attempt to use the invalid subkey, and will fail to send encrypted email to Alice. This vulnerability affects Thunderbird < 78.9.1.