https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:08:24.686896+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:7672 ALSA-2025:7672 — Moderate: xdg-utils security update 2026-10-03T21:08:24.693491+00:00

Affected: AlmaLinux:9: xdg-utils

The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop.

Security Fix(es):

* xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments (CVE-2022-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-04910 bdu:2025-04910 2026-10-03T21:08:24.693546+00:00 bdu:2025-04910 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 certfr-2025-avi-0524 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Elles permettent à un attaquant de provoquer un prob… 2026-10-03T21:08:24.693564+00:00 certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/euvd-2026-235753 EUVD-2026-235753 2026-10-03T21:08:24.693578+00:00 EUVD-2026-235753 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4055 fkie_cve-2022-4055 2026-10-03T21:08:24.693589+00:00

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

 https://cve.radiocsirt.org/vuln/ghsa-p4jr-wm76-h2v3 GHSA-p4jr-wm76-h2v3 2026-10-03T21:08:24.693610+00:00

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

 https://cve.radiocsirt.org/vuln/gsd-2022-4055 gsd-2022-4055 2026-10-03T21:08:24.693624+00:00 gsd-2022-4055 https://cve.radiocsirt.org/vuln/msrc_cve-2022-4055 msrc_CVE-2022-4055 — When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional head… 2026-10-03T21:08:24.693634+00:00 msrc_CVE-2022-4055 https://cve.radiocsirt.org/vuln/rhsa-2025:7672 RHSA-2025:7672 — Red Hat Security Advisory: xdg-utils security update 2026-10-03T21:08:24.693649+00:00

xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4055 UBUNTU-CVE-2022-4055 2026-10-03T21:08:24.693664+00:00

Affected: Ubuntu:16.04:LTS: xdg-utils, Ubuntu:18.04:LTS: xdg-utils, Ubuntu:20.04:LTS: xdg-utils, Ubuntu:22.04:LTS: xdg-utils, Ubuntu:24.04:LTS: xdg-utils, Ubuntu:25.10: xdg-utils, Ubuntu:26.04:LTS: xdg-utils

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1074 WID-SEC-W-2025-1074 — Red Hat Enterprise Linux (xdg-utils): Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen 2026-10-03T21:08:24.693690+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.