https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:16:17.007080+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:0845 ALSA-2022:0845 — Important: thunderbird security update 2026-10-02T17:16:17.175863+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.7.0.

Security Fix(es):

* Mozilla: Use-after-free in XSLT parameter processing (CVE-2022-26485)

* Mozilla: Use-after-free in WebGPU IPC Framework (CVE-2022-26486)

* expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)

* expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution (CVE-2022-25236)

* expat: Integer overflow in storeRawNames() (CVE-2022-25315)

* Mozilla: Use-after-free in text reflows (CVE-2022-26381)

* Mozilla: Browser window spoof using fullscreen mode (CVE-2022-26383)

* Mozilla: iframe allow-scripts sandbox bypass (CVE-2022-26384)

* Mozilla: Time-of-check time-of-use bug when verifying add-on signatures (CVE-2022-26387)

* thunderbird: Crafted email could trigger an out-of-bounds write (CVE-2022-0566)

* Mozilla: Temporary files downloaded to /tmp and accessible by other local users (CVE-2022-26386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-01072 bdu:2022-01072 2026-10-02T17:16:17.175939+00:00 bdu:2022-01072 https://cve.radiocsirt.org/vuln/certfr-2022-avi-153 certfr-2022-avi-153 — Une vulnérabilité a été découverte dans Mozilla Thunderbird. Elle permet à un attaquant de provoquer un problème de séc… 2026-10-02T17:16:17.175956+00:00 certfr-2022-avi-153 https://cve.radiocsirt.org/vuln/euvd-2026-230742 EUVD-2026-230742 2026-10-02T17:16:17.175972+00:00 EUVD-2026-230742 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0566 fkie_cve-2022-0566 2026-10-02T17:16:17.175982+00:00

It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message. This vulnerability affects Thunderbird < 91.6.1.

 https://cve.radiocsirt.org/vuln/ghsa-3jgp-624h-phx4 GHSA-3jgp-624h-phx4 2026-10-02T17:16:17.176004+00:00

It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message. This vulnerability affects Thunderbird < 91.6.1.

 https://cve.radiocsirt.org/vuln/gsd-2022-0566 gsd-2022-0566 2026-10-02T17:16:17.176018+00:00 gsd-2022-0566 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0559-1 openSUSE-SU-2022:0559-1 — Security update for MozillaThunderbird 2026-10-02T17:16:17.176028+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/rhsa-2022:0843 RHSA-2022:0843 — Red Hat Security Advisory: thunderbird security update 2026-10-02T17:16:17.176049+00:00

thunderbird: Crafted email could trigger an out-of-bounds write expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution expat: Integer overflow in storeRawNames() Mozilla: Use-after-free in text reflows Mozilla: Browser window spoof using fullscreen mode Mozilla: iframe allow-scripts sandbox bypass Mozilla: Temporary files downloaded to /tmp and accessible by other local users Mozilla: Time-of-check time-of-use bug when verifying add-on signatures Mozilla: Use-after-free in XSLT parameter processing Mozilla: Use-after-free in WebGPU IPC Framework

 https://cve.radiocsirt.org/vuln/suse-su-2022:0559-1 SUSE-SU-2022:0559-1 — Security update for MozillaThunderbird 2026-10-02T17:16:17.176080+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0566 UBUNTU-CVE-2022-0566 2026-10-02T17:16:17.176096+00:00

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird

It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message. This vulnerability affects Thunderbird < 91.6.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator… 2026-10-02T17:16:17.176117+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.