https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:21:06.653980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1730 ALSA-2022:1730 — Important: thunderbird security update 2026-10-04T01:21:06.691555+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.9.0.

Security Fix(es):

* Mozilla: Bypassing permission prompt in nested browsing contexts (CVE-2022-29909)

* Mozilla: iframe Sandbox bypass (CVE-2022-29911)

* Mozilla: Fullscreen notification bypass using popups (CVE-2022-29914)

* Mozilla: Leaking browser history with CSS variables (CVE-2022-29916)

* Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9 (CVE-2022-29917)

* Mozilla: Reader mode bypassed SameSite cookies (CVE-2022-29912)

* Mozilla: Speech Synthesis feature not properly disabled (CVE-2022-29913)

* Mozilla: Incorrect security status shown after viewing an attached email (CVE-2022-1520)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-02941 bdu:2022-02941 2026-10-04T01:21:06.691625+00:00 bdu:2022-02941 https://cve.radiocsirt.org/vuln/certfr-2022-avi-420 certfr-2022-avi-420 — De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Certaines d'entre elles permettent à un attaq… 2026-10-04T01:21:06.691642+00:00 certfr-2022-avi-420 https://cve.radiocsirt.org/vuln/cnvd-2025-18680 cnvd-2025-18680 2026-10-04T01:21:06.691658+00:00 cnvd-2025-18680 https://cve.radiocsirt.org/vuln/euvd-2026-230544 EUVD-2026-230544 2026-10-04T01:21:06.691669+00:00 EUVD-2026-230544 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29913 fkie_cve-2022-29913 2026-10-04T01:21:06.691679+00:00

The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird < 91.9.

 https://cve.radiocsirt.org/vuln/ghsa-26j5-r8rm-66gf GHSA-26j5-r8rm-66gf 2026-10-04T01:21:06.691700+00:00

The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird < 91.9.

 https://cve.radiocsirt.org/vuln/gsd-2022-29913 gsd-2022-29913 2026-10-04T01:21:06.691714+00:00 gsd-2022-29913 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12045-1 openSUSE-SU-2024:12045-1 — MozillaThunderbird-91.9.0-1.1 on GA media 2026-10-04T01:21:06.691723+00:00

MozillaThunderbird-91.9.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:1724 RHSA-2022:1724 — Red Hat Security Advisory: thunderbird security update 2026-10-04T01:21:06.691741+00:00

Mozilla: Incorrect security status shown after viewing an attached email Mozilla: Bypassing permission prompt in nested browsing contexts Mozilla: iframe Sandbox bypass Mozilla: Reader mode bypassed SameSite cookies Mozilla: Speech Synthesis feature not properly disabled Mozilla: Fullscreen notification bypass using popups Mozilla: Leaking browser history with CSS variables Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-29913 UBUNTU-CVE-2022-29913 2026-10-04T01:21:06.691762+00:00

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird

The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird < 91.9.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0538 WID-SEC-W-2022-0538 — Mozilla Thunderbird: Mehrere Schwachstellen 2026-10-04T01:21:06.691783+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Thunderbird ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und beliebigen Code auszuführen.