https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:29:25.020108+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1301 ALSA-2022:1301 — Important: thunderbird security update 2026-10-03T03:29:25.218367+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.8.0.

Security Fix(es):

* Mozilla: Use-after-free in NSSToken objects (CVE-2022-1097)

* Mozilla: Out of bounds write due to unexpected WebAuthN Extensions (CVE-2022-28281)

* Mozilla: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8 (CVE-2022-28289)

* Mozilla: Use-after-free after VR Process destruction (CVE-2022-1196)

* Mozilla: OpenPGP revocation information was ignored (CVE-2022-1197)

* Mozilla: Use-after-free in DocumentL10n::TranslateDocument (CVE-2022-28282)

* Mozilla: Incorrect AliasSet used in JIT Codegen (CVE-2022-28285)

* Mozilla: Denial of Service via complex regular expressions (CVE-2022-24713)

* Mozilla: iframe contents could be rendered outside the border (CVE-2022-28286)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-04617 bdu:2022-04617 2026-10-03T03:29:25.218435+00:00 bdu:2022-04617 https://cve.radiocsirt.org/vuln/certfr-2022-avi-316 certfr-2022-avi-316 — De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Certaines d'entre elles permettent à un attaq… 2026-10-03T03:29:25.218452+00:00 certfr-2022-avi-316 https://cve.radiocsirt.org/vuln/euvd-2026-230735 EUVD-2026-230735 2026-10-03T03:29:25.218467+00:00 EUVD-2026-230735 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1197 fkie_cve-2022-1197 2026-10-03T03:29:25.218478+00:00

When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept as non-revoked. Revocation statements that used another revocation reason, or that didn't specify a revocation reason, were unaffected. This vulnerability affects Thunderbird < 91.8.

 https://cve.radiocsirt.org/vuln/ghsa-h922-mv7w-mhm4 GHSA-h922-mv7w-mhm4 2026-10-03T03:29:25.218501+00:00

When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept as non-revoked. Revocation statements that used another revocation reason, or that didn't specify a revocation reason, were unaffected. This vulnerability affects Thunderbird < 91.8.

 https://cve.radiocsirt.org/vuln/gsd-2022-1197 gsd-2022-1197 2026-10-03T03:29:25.218517+00:00 gsd-2022-1197 https://cve.radiocsirt.org/vuln/rhsa-2022:1301 RHSA-2022:1301 — Red Hat Security Advisory: thunderbird security update 2026-10-03T03:29:25.218527+00:00

Mozilla: Use-after-free in NSSToken objects Mozilla: Use-after-free after VR Process destruction Mozilla: OpenPGP revocation information was ignored Mozilla: Denial of Service via complex regular expressions Mozilla: Out of bounds write due to unexpected WebAuthN Extensions Mozilla: Use-after-free in DocumentL10n::TranslateDocument Mozilla: Incorrect AliasSet used in JIT Codegen Mozilla: iframe contents could be rendered outside the border Mozilla: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8

 https://cve.radiocsirt.org/vuln/rhsa-2022:1303 RHSA-2022:1303 — Red Hat Security Advisory: thunderbird security update 2026-10-03T03:29:25.218557+00:00

Mozilla: Use-after-free in NSSToken objects Mozilla: Use-after-free after VR Process destruction Mozilla: OpenPGP revocation information was ignored Mozilla: Denial of Service via complex regular expressions Mozilla: Out of bounds write due to unexpected WebAuthN Extensions Mozilla: Use-after-free in DocumentL10n::TranslateDocument Mozilla: Incorrect AliasSet used in JIT Codegen Mozilla: iframe contents could be rendered outside the border Mozilla: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8

 https://cve.radiocsirt.org/vuln/suse-su-2022:1176-1 SUSE-SU-2022:1176-1 — Security update for MozillaThunderbird 2026-10-03T03:29:25.218582+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1197 UBUNTU-CVE-2022-1197 2026-10-03T03:29:25.218600+00:00

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird

When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept as non-revoked. Revocation statements that used another revocation reason, or that didn't specify a revocation reason, were unaffected. This vulnerability affects Thunderbird < 91.8.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0482 WID-SEC-W-2022-0482 — Mozilla Firefox, Mozilla Firefox ESR und Thunderbird: Mehrere Schwachstellen 2026-10-03T03:29:25.218622+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, falsche Informationen darzustellen und einen Denial-of-Service-Zustand zu verursachen.