https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:14:07.565325+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:5045 ALSA-2021:5045 — Important: thunderbird security update 2026-10-03T06:14:07.721667+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.4.0.

Security Fix(es):

* Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4 (BZ#2030116)

* Mozilla: URL leakage when navigating while executing asynchronous function (CVE-2021-43536)

* Mozilla: Heap buffer overflow when using structured clone (CVE-2021-43537)

* Mozilla: Missing fullscreen and pointer lock notification when requesting both (CVE-2021-43538)

* Mozilla: GC rooting failure when calling wasm instance methods (CVE-2021-43539)

* Mozilla: External protocol handler parameters were unescaped (CVE-2021-43541)

* Mozilla: XMLHttpRequest error codes could have leaked the existence of an external protocol handler (CVE-2021-43542)

* Mozilla: Bypass of CSP sandbox directive when embedding (CVE-2021-43543)

* Mozilla: JavaScript unexpectedly enabled for the composition area (CVE-2021-43528)

* Mozilla: Denial of Service when using the Location API in a loop (CVE-2021-43545)

* Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed (CVE-2021-43546)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-02701 bdu:2022-02701 2026-10-03T06:14:07.721735+00:00 bdu:2022-02701 https://cve.radiocsirt.org/vuln/certfr-2021-avi-925 certfr-2021-avi-925 — De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Elles permettent à un attaquant de provoquer… 2026-10-03T06:14:07.721753+00:00 certfr-2021-avi-925 https://cve.radiocsirt.org/vuln/euvd-2026-32538 EUVD-2026-32538 2026-10-03T06:14:07.721769+00:00 EUVD-2026-32538 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43528 fkie_cve-2021-43528 2026-10-03T06:14:07.721780+00:00

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird < 91.4.0.

 https://cve.radiocsirt.org/vuln/ghsa-q4gq-74cq-85g9 GHSA-q4gq-74cq-85g9 2026-10-03T06:14:07.721810+00:00

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird < 91.4.0.

 https://cve.radiocsirt.org/vuln/gsd-2021-43528 gsd-2021-43528 2026-10-03T06:14:07.721826+00:00 gsd-2021-43528 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1635-1 openSUSE-SU-2021:1635-1 — Security update for MozillaThunderbird 2026-10-03T06:14:07.721837+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/rhsa-2021:5047 RHSA-2021:5047 — Red Hat Security Advisory: thunderbird security update 2026-10-03T06:14:07.721872+00:00

Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4 Mozilla: JavaScript unexpectedly enabled for the composition area Mozilla: URL leakage when navigating while executing asynchronous function Mozilla: Heap buffer overflow when using structured clone Mozilla: Missing fullscreen and pointer lock notification when requesting both Mozilla: GC rooting failure when calling wasm instance methods Mozilla: External protocol handler parameters were unescaped Mozilla: XMLHttpRequest error codes could have leaked the existence of an external protocol handler Mozilla: Bypass of CSP sandbox directive when embedding Mozilla: Denial of Service when using the Location API in a loop Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed

 https://cve.radiocsirt.org/vuln/suse-su-2021:4150-1 SUSE-SU-2021:4150-1 — Security update for MozillaThunderbird 2026-10-03T06:14:07.721903+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-43528 UBUNTU-CVE-2021-43528 2026-10-03T06:14:07.721933+00:00

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird < 91.4.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator… 2026-10-03T06:14:07.721954+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.