https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:17:29.646643+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:8547 ALSA-2022:8547 — Important: thunderbird security update 2026-10-02T17:17:29.740572+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.5.0.

Security Fix(es):

* Mozilla: Service Workers might have learned size of cross-origin media files (CVE-2022-45403) * Mozilla: Fullscreen notification bypass (CVE-2022-45404) * Mozilla: Use-after-free in InputStream implementation (CVE-2022-45405) * Mozilla: Use-after-free of a JavaScript Realm (CVE-2022-45406) * Mozilla: Fullscreen notification bypass via windowName (CVE-2022-45408) * Mozilla: Use-after-free in Garbage Collection (CVE-2022-45409) * Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5 (CVE-2022-45421) * Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy (CVE-2022-45410) * Mozilla: Cross-Site Tracing was possible via non-standard override headers (CVE-2022-45411) * Mozilla: Symlinks may resolve to partially uninitialized buffers (CVE-2022-45412) * Mozilla: Keystroke Side-Channel Leakage (CVE-2022-45416) * Mozilla: Custom mouse cursor could have been drawn over browser UI (CVE-2022-45418) * Mozilla: Iframe contents could be rendered outside the iframe (CVE-2022-45420)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-06816 bdu:2022-06816 2026-10-02T17:17:29.740659+00:00 bdu:2022-06816 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1033 certfr-2022-avi-1033 — De multiples vulnérabilités ont été corrigées dans <span class="textit">les produits Mozilla</span>. Elles permettent à… 2026-10-02T17:17:29.740678+00:00 certfr-2022-avi-1033 https://cve.radiocsirt.org/vuln/euvd-2026-230054 EUVD-2026-230054 2026-10-02T17:17:29.740695+00:00 EUVD-2026-230054 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45406 fkie_cve-2022-45406 2026-10-02T17:17:29.740712+00:00

If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape. This could lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

 https://cve.radiocsirt.org/vuln/ghsa-h3mp-j53v-44vx GHSA-h3mp-j53v-44vx 2026-10-02T17:17:29.740768+00:00

If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape. This could lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

 https://cve.radiocsirt.org/vuln/gsd-2022-45406 gsd-2022-45406 2026-10-02T17:17:29.740784+00:00 gsd-2022-45406 https://cve.radiocsirt.org/vuln/oesa-2024-1859 OESA-2024-1859 — firefox security update 2026-10-02T17:17:29.740795+00:00

Affected: openEuler:20.03-LTS-SP4: firefox

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fix(es):Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es): When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox &lt; 81.(CVE-2020-15675) Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash. This vulnerability affects Firefox &lt; 85, Thunderbird &lt; 78.7, and Firefox ESR &lt; 78.7.(CVE-2021-23954) If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape. This could lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR &lt; 102.5, Thunderbird &lt; 102.5, and Firefox &lt; 107.(CVE-2022-45406)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12518-1 openSUSE-SU-2024:12518-1 — MozillaFirefox-107.0-1.1 on GA media 2026-10-02T17:17:29.740823+00:00

MozillaFirefox-107.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:8543 RHSA-2022:8543 — Red Hat Security Advisory: thunderbird security update 2026-10-02T17:17:29.740852+00:00

Mozilla: Service Workers might have learned size of cross-origin media files Mozilla: Fullscreen notification bypass Mozilla: Use-after-free in InputStream implementation Mozilla: Use-after-free of a JavaScript Realm Mozilla: Fullscreen notification bypass via windowName Mozilla: Use-after-free in Garbage Collection Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy Mozilla: Cross-Site Tracing was possible via non-standard override headers Mozilla: Symlinks may resolve to partially uninitialized buffers Mozilla: Keystroke Side-Channel Leakage Mozilla: Custom mouse cursor could have been drawn over browser UI Mozilla: Iframe contents could be rendered outside the iframe Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5

 https://cve.radiocsirt.org/vuln/suse-su-2022:4083-1 SUSE-SU-2022:4083-1 — Security update for MozillaFirefox 2026-10-02T17:17:29.740886+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45406 UBUNTU-CVE-2022-45406 2026-10-02T17:17:29.740906+00:00

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird

If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape. This could lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2055 WID-SEC-W-2022-2055 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-02T17:17:29.740939+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen und Informationen falsch darzustellen.