https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:11:02.965128+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:6164 ALSA-2022:6164 — Important: thunderbird security update 2026-10-04T10:11:03.006667+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.13.0. Security Fix(es): * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) * Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477) * Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 (CVE-2022-38478) * Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05298 bdu:2022-05298 2026-10-04T10:11:03.006793+00:00 bdu:2022-05298 https://cve.radiocsirt.org/vuln/certfr-2022-avi-765 certfr-2022-avi-765 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Mozilla</span>. Elles permettent à un attaquant… 2026-10-04T10:11:03.006815+00:00 certfr-2022-avi-765 https://cve.radiocsirt.org/vuln/euvd-2026-230144 EUVD-2026-230144 2026-10-04T10:11:03.006832+00:00 EUVD-2026-230144 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38476 fkie_cve-2022-38476 2026-10-04T10:11:03.006843+00:00

A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR < 102.2 and Thunderbird < 102.2.

 https://cve.radiocsirt.org/vuln/ghsa-mj64-2668-m2rv GHSA-mj64-2668-m2rv 2026-10-04T10:11:03.006865+00:00

A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR < 102.2 and Thunderbird < 102.2.

 https://cve.radiocsirt.org/vuln/gsd-2022-38476 gsd-2022-38476 2026-10-04T10:11:03.006881+00:00 gsd-2022-38476 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12287-1 openSUSE-SU-2024:12287-1 — MozillaThunderbird-102.2.0-1.1 on GA media 2026-10-04T10:11:03.006891+00:00

MozillaThunderbird-102.2.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:6166 RHSA-2022:6166 — Red Hat Security Advisory: thunderbird security update 2026-10-04T10:11:03.006909+00:00

Mozilla: Address bar spoofing via XSLT error handling Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions Mozilla: Data race and potential use-after-free in PK11_ChangePW Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13

 https://cve.radiocsirt.org/vuln/suse-su-2022:3272-1 SUSE-SU-2022:3272-1 — Security update for MozillaFirefox 2026-10-04T10:11:03.006931+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-38476 UBUNTU-CVE-2022-38476 2026-10-04T10:11:03.006954+00:00

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird

A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR < 102.2 and Thunderbird < 102.2.