https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:55:00.274215+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:0821 ALSA-2023:0821 — Important: thunderbird security update 2026-10-03T00:55:00.510533+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.8.0.

Security Fix(es):

* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728) * Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735) * Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737) * Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739) * Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743) * Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746) * Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729) * Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732) * Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616) * Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-01028 bdu:2023-01028 2026-10-03T00:55:00.510605+00:00 bdu:2023-01028 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0139 certfr-2023-avi-0139 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Mozilla Thunderbird</span>. Elles permettent à… 2026-10-03T00:55:00.510622+00:00 certfr-2023-avi-0139 https://cve.radiocsirt.org/vuln/euvd-2026-210083 EUVD-2026-210083 2026-10-03T00:55:00.510639+00:00 EUVD-2026-210083 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0616 fkie_cve-2023-0616 2026-10-03T00:55:00.510650+00:00

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

 https://cve.radiocsirt.org/vuln/ghsa-w7wv-wm72-g6pr GHSA-w7wv-wm72-g6pr 2026-10-03T00:55:00.510674+00:00

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

 https://cve.radiocsirt.org/vuln/gsd-2023-0616 gsd-2023-0616 2026-10-03T00:55:00.510701+00:00 gsd-2023-0616 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12713-1 openSUSE-SU-2024:12713-1 — MozillaThunderbird-102.8.0-1.1 on GA media 2026-10-03T00:55:00.510712+00:00

MozillaThunderbird-102.8.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:0818 RHSA-2023:0818 — Red Hat Security Advisory: thunderbird security update 2026-10-03T00:55:00.510736+00:00

Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP Mozilla: Content security policy leak in violation reports using iframes Mozilla: Extensions could have opened external schemes without user knowledge Mozilla: Screen hijack via browser fullscreen mode Mozilla: Out of bounds memory write from EncodeInputStream Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext Mozilla: Web Crypto ImportKey crashes tab Mozilla: Fullscreen notification not shown in Firefox Focus Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 Mozilla: Memory safety bugs fixed in Firefox ESR 102.8

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-0616 UBUNTU-CVE-2023-0616 2026-10-03T00:55:00.510770+00:00

Affected: Ubuntu:18.04:LTS: thunderbird, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0407 WID-SEC-W-2023-0407 — Mozilla Thunderbird: Mehrere Schwachstellen 2026-10-03T00:55:00.510794+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und Informationen falsch darzustellen.