https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:55:08.418207+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:0808 ALSA-2023:0808 — Important: firefox security update 2026-10-03T20:55:08.524547+00:00

Affected: AlmaLinux:8: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.8.0 ESR.

Security Fix(es):

* Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728) * Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735) * Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737) * Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739) * Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743) * Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746) * Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729) * Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732) * Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-01261 bdu:2023-01261 2026-10-03T20:55:08.524642+00:00 bdu:2023-01261 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0124 certfr-2023-avi-0124 — De multiples vulnérabilités ont été corrigées dans<span class="textit"> Mozilla Firefox</span>. Elles permettent à un a… 2026-10-03T20:55:08.524662+00:00 certfr-2023-avi-0124 https://cve.radiocsirt.org/vuln/cnvd-2023-55355 cnvd-2023-55355 2026-10-03T20:55:08.524679+00:00 cnvd-2023-55355 https://cve.radiocsirt.org/vuln/euvd-2026-209785 EUVD-2026-209785 2026-10-03T20:55:08.524691+00:00 EUVD-2026-209785 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25743 fkie_cve-2023-25743 2026-10-03T20:55:08.524702+00:00

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.

 https://cve.radiocsirt.org/vuln/ghsa-j7hq-xhjg-3w36 GHSA-j7hq-xhjg-3w36 2026-10-03T20:55:08.524727+00:00

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.

 https://cve.radiocsirt.org/vuln/gsd-2023-25743 gsd-2023-25743 2026-10-03T20:55:08.524742+00:00 gsd-2023-25743 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12702-1 openSUSE-SU-2024:12702-1 — libmozjs-102-0-102.8.0-1.1 on GA media 2026-10-03T20:55:08.524752+00:00

libmozjs-102-0-102.8.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:0805 RHSA-2023:0805 — Red Hat Security Advisory: firefox security update 2026-10-03T20:55:08.524778+00:00

Mozilla: Content security policy leak in violation reports using iframes Mozilla: Extensions could have opened external schemes without user knowledge Mozilla: Screen hijack via browser fullscreen mode Mozilla: Out of bounds memory write from EncodeInputStream Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext Mozilla: Web Crypto ImportKey crashes tab Mozilla: Fullscreen notification not shown in Firefox Focus Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 Mozilla: Memory safety bugs fixed in Firefox ESR 102.8

 https://cve.radiocsirt.org/vuln/suse-su-2023:0466-1 SUSE-SU-2023:0466-1 — Security update for MozillaFirefox 2026-10-03T20:55:08.524811+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0385 WID-SEC-W-2023-0385 — Mozilla Firefox: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-03T20:55:08.524834+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um Code auszuführen, Sicherheitsmechanismen zu umgehen, den Benutzer zu täuschen, Informationen offenzulegen und andere unbekannte Effekte zu erzielen.