https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:30:50.258678+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:0510 ALSA-2022:0510 — Important: firefox security update 2026-10-02T16:30:50.454580+00:00

Affected: AlmaLinux:8: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 91.6.0 ESR.

Security Fix(es):

* Mozilla: Extensions could have bypassed permission confirmation during update (CVE-2022-22754)

* Mozilla: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6 (CVE-2022-22764)

* Mozilla: Drag and dropping an image could have resulted in the dropped object being an executable (CVE-2022-22756)

* Mozilla: Sandboxed iframes could have executed script if the parent appended elements (CVE-2022-22759)

* Mozilla: Cross-Origin responses could be distinguished between script and non-script content-types (CVE-2022-22760)

* Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages (CVE-2022-22761)

* Mozilla: Script Execution during invalid object state (CVE-2022-22763)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-06142 bdu:2022-06142 2026-10-02T16:30:50.454676+00:00 bdu:2022-06142 https://cve.radiocsirt.org/vuln/certfr-2022-avi-126 certfr-2022-avi-126 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Elles permettent à un attaquant de provoquer une… 2026-10-02T16:30:50.454696+00:00 certfr-2022-avi-126 https://cve.radiocsirt.org/vuln/cnvd-2023-03065 cnvd-2023-03065 2026-10-02T16:30:50.454713+00:00 cnvd-2023-03065 https://cve.radiocsirt.org/vuln/euvd-2026-230641 EUVD-2026-230641 2026-10-02T16:30:50.454725+00:00 EUVD-2026-230641 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22763 fkie_cve-2022-22763 2026-10-02T16:30:50.454735+00:00

When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulnerability affects Firefox < 96, Thunderbird < 91.6, and Firefox ESR < 91.6.

 https://cve.radiocsirt.org/vuln/ghsa-3fr2-34qf-c3pm GHSA-3fr2-34qf-c3pm 2026-10-02T16:30:50.454757+00:00

When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulnerability affects Firefox < 96, Thunderbird < 91.6, and Firefox ESR < 91.6.

 https://cve.radiocsirt.org/vuln/gsd-2022-22763 gsd-2022-22763 2026-10-02T16:30:50.454772+00:00 gsd-2022-22763 https://cve.radiocsirt.org/vuln/oesa-2023-1673 OESA-2023-1673 — firefox security update 2026-10-02T16:30:50.454783+00:00

Affected: openEuler:22.03-LTS: firefox

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es): Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 80, Firefox ESR &lt; 78.2, Thunderbird &lt; 78.2, and Firefox for Android &lt; 80.(CVE-2020-15670) Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 81, Thunderbird &lt; 78.3, and Firefox ESR &lt; 78.3.(CVE-2020-15673) Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 81.(CVE-2020-15674) When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially exploitable crash. This vulnerability affects F…

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0559-1 openSUSE-SU-2022:0559-1 — Security update for MozillaThunderbird 2026-10-02T16:30:50.455196+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/rhsa-2022:0511 RHSA-2022:0511 — Red Hat Security Advisory: firefox security update 2026-10-02T16:30:50.455234+00:00

Mozilla: Extensions could have bypassed permission confirmation during update Mozilla: Drag and dropping an image could have resulted in the dropped object being an executable Mozilla: Sandboxed iframes could have executed script if the parent appended elements Mozilla: Cross-Origin responses could be distinguished between script and non-script content-types Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages Mozilla: Script Execution during invalid object state Mozilla: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6

 https://cve.radiocsirt.org/vuln/suse-su-2022:0559-1 SUSE-SU-2022:0559-1 — Security update for MozillaThunderbird 2026-10-02T16:30:50.455262+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-22763 UBUNTU-CVE-2022-22763 2026-10-02T16:30:50.455290+00:00

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: thunderbird

When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulnerability affects Firefox < 96, Thunderbird < 91.6, and Firefox ESR < 91.6.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator… 2026-10-02T16:30:50.455321+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.