https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:32:12.026848+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:6708 ALSA-2022:6708 — Important: thunderbird security update 2026-10-02T20:32:12.266861+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.3.0.

Security Fix(es):

* Mozilla: Leaking of sensitive information when composing a response to an HTML email with a META refresh tag (CVE-2022-3033) * Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959) * Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960) * Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962) * Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked (CVE-2022-3032) * Mozilla: An iframe element in an HTML email could trigger a network request (CVE-2022-3034) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2022-36059) * Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix (CVE-2022-40958) * Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956) * Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05479 bdu:2022-05479 2026-10-02T20:32:12.266962+00:00 bdu:2022-05479 https://cve.radiocsirt.org/vuln/certfr-2022-avi-786 certfr-2022-avi-786 — De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Elles permettent à un attaquant de provoquer… 2026-10-02T20:32:12.266987+00:00 certfr-2022-avi-786 https://cve.radiocsirt.org/vuln/euvd-2026-230119 EUVD-2026-230119 2026-10-02T20:32:12.267013+00:00 EUVD-2026-230119 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3034 fkie_cve-2022-3034 2026-10-02T20:32:12.267031+00:00

When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to the remote document was sent. However, Thunderbird didn't display the document. This vulnerability affects Thunderbird < 102.2.1 and Thunderbird < 91.13.1.

 https://cve.radiocsirt.org/vuln/ghsa-wrfx-qxxc-92rj GHSA-wrfx-qxxc-92rj 2026-10-02T20:32:12.267065+00:00

When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to the remote document was sent. However, Thunderbird didn't display the document. This vulnerability affects Thunderbird < 102.2.1 and Thunderbird < 91.13.1.

 https://cve.radiocsirt.org/vuln/gsd-2022-3034 gsd-2022-3034 2026-10-02T20:32:12.267090+00:00 gsd-2022-3034 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12299-1 openSUSE-SU-2024:12299-1 — MozillaThunderbird-102.2.1-1.1 on GA media 2026-10-02T20:32:12.267107+00:00

MozillaThunderbird-102.2.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:6713 RHSA-2022:6713 — Red Hat Security Advisory: thunderbird security update 2026-10-02T20:32:12.267135+00:00

Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked Mozilla: Leaking of sensitive information when composing a response to an HTML email with a META refresh tag Mozilla: An iframe element in an HTML email could trigger a network request Mozilla: Out of bounds read when decoding H264 Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack Mozilla: Content-Security-Policy base-uri bypass Mozilla: Incoherent instruction cache when building WASM on ARM64 Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix Mozilla: Bypassing FeaturePolicy restrictions on transient pages Mozilla: Data-race when parsing non-UTF-8 URLs in threads Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3034 UBUNTU-CVE-2022-3034 2026-10-02T20:32:12.267187+00:00

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird

When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to the remote document was sent. However, Thunderbird didn't display the document. This vulnerability affects Thunderbird < 102.2.1 and Thunderbird < 91.13.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1246 WID-SEC-W-2022-1246 — Mozilla Thunderbird: Mehrere Schwachstellen 2026-10-02T20:32:12.267243+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Thunderbird ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.