https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:58:30.409000+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:1802 ALSA-2023:1802 — Important: thunderbird security update 2026-10-03T11:58:30.670514+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.10.0.

Security Fix(es):

* Thunderbird: Revocation status of S/Mime recipient certificates was not checked (CVE-2023-0547) * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2023-28427) * Mozilla: Fullscreen notification obscured (CVE-2023-29533) * Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535) * Mozilla: Invalid free from JavaScript code (CVE-2023-29536) * Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550) * Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945) * Thunderbird: Hang when processing certain OpenPGP messages (CVE-2023-29479) * Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539) * Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541) * Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548) * MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-02698 bdu:2023-02698 2026-10-03T11:58:30.670626+00:00 bdu:2023-02698 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0303 certfr-2023-avi-0303 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-03T11:58:30.670653+00:00 certfr-2023-avi-0303 https://cve.radiocsirt.org/vuln/cnvd-2023-55352 cnvd-2023-55352 2026-10-03T11:58:30.670684+00:00 cnvd-2023-55352 https://cve.radiocsirt.org/vuln/euvd-2026-210084 EUVD-2026-210084 2026-10-03T11:58:30.670704+00:00 EUVD-2026-210084 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0547 fkie_cve-2023-0547 2026-10-03T11:58:30.670722+00:00

OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions from 68 to 102.9.1 were affected by this bug. This vulnerability affects Thunderbird < 102.10.

 https://cve.radiocsirt.org/vuln/ghsa-r9gq-fgfv-3p2p GHSA-r9gq-fgfv-3p2p 2026-10-03T11:58:30.670758+00:00

OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions from 68 to 102.9.1 were affected by this bug. This vulnerability affects Thunderbird < 102.10.

 https://cve.radiocsirt.org/vuln/gsd-2023-0547 gsd-2023-0547 2026-10-03T11:58:30.670783+00:00 gsd-2023-0547 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12852-1 openSUSE-SU-2024:12852-1 — MozillaThunderbird-102.10.0-1.1 on GA media 2026-10-03T11:58:30.670800+00:00

MozillaThunderbird-102.10.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:1803 RHSA-2023:1803 — Red Hat Security Advisory: thunderbird security update 2026-10-03T11:58:30.670838+00:00

Thunderbird: Revocation status of S/Mime recipient certificates was not checked Mozilla: Memory Corruption in Safe Browsing Code Mozilla: libwebp: Double-free in libwebp Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack Thunderbird: Hang when processing certain OpenPGP messages Mozilla: Fullscreen notification obscured Mozilla: Potential Memory Corruption following Garbage Collector compaction Mozilla: Invalid free from JavaScript code Mozilla: Content-Disposition filename truncation leads to Reflected File Download Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux Mozilla: Incorrect optimization result on ARM64 Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-0547 UBUNTU-CVE-2023-0547 2026-10-03T11:58:30.670895+00:00

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird

OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions from 68 to 102.9.1 were affected by this bug. This vulnerability affects Thunderbird < 102.10.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0941 WID-SEC-W-2023-0941 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-03T11:58:30.670932+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, um Informationen offenzulegen und um Sicherheitsmechanismen zu umgehen.