https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:44:34.248109+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:4497 ALSA-2023:4497 — Important: thunderbird security update 2026-10-03T17:44:34.467445+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.14.0.

Security Fix(es):

* Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045) * Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046) * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047) * Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048) * Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049) * Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050) * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056) * Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057) * thunderbird: File Extension Spoofing using the Text Direction Override Character (CVE-2023-3417) * Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-03965 bdu:2023-03965 2026-10-03T17:44:34.467511+00:00 bdu:2023-03965 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0573 certfr-2023-avi-0573 — De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Elles permettent à un attaquant de provoquer… 2026-10-03T17:44:34.467531+00:00 certfr-2023-avi-0573 https://cve.radiocsirt.org/vuln/euvd-2026-264009 EUVD-2026-264009 2026-10-03T17:44:34.467561+00:00 EUVD-2026-264009 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3417 fkie_cve-2023-3417 2026-10-03T17:44:34.467574+00:00

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This vulnerability affects Thunderbird < 115.0.1 and Thunderbird < 102.13.1.

 https://cve.radiocsirt.org/vuln/ghsa-xpxg-5vmj-vx9g GHSA-xpxg-5vmj-vx9g 2026-10-03T17:44:34.467598+00:00

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This vulnerability affects Thunderbird < 115.0.1.

 https://cve.radiocsirt.org/vuln/gsd-2023-3417 gsd-2023-3417 2026-10-03T17:44:34.467614+00:00 gsd-2023-3417 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13072-1 openSUSE-SU-2024:13072-1 — MozillaThunderbird-102.13.1-1.1 on GA media 2026-10-03T17:44:34.467624+00:00

MozillaThunderbird-102.13.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:4492 RHSA-2023:4492 — Red Hat Security Advisory: thunderbird security update 2026-10-03T17:44:34.467641+00:00

thunderbird: File Extension Spoofing using the Text Direction Override Character Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions Mozilla: Incorrect value used during WASM compilation Mozilla: Potential permissions request bypass via clickjacking Mozilla: Crash in DOMParser due to out-of-memory conditions Mozilla: Fix potential race conditions when releasing platform objects Mozilla: Stack buffer overflow in StorageManager Mozilla: Cookie jar overflow caused unexpected cookie jar state Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3417 UBUNTU-CVE-2023-3417 2026-10-03T17:44:34.467674+00:00

Affected: Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file extension. This vulnerability affects Thunderbird < 115.0.1 and Thunderbird < 102.13.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1866 WID-SEC-W-2023-1866 — Mozilla Thunderbird: Mehrere Schwachstellen 2026-10-03T17:44:34.467696+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Thunderbird ausnutzen, um falsche Informationen darzustellen oder einen Denial of Service Zustand herbeizuführen.