https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:21:13.328094+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:4063 ALSA-2023:4063 — Important: thunderbird security update 2026-10-03T13:21:13.413316+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.13.0.

Security Fix(es):

* Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-37202) * Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 (CVE-2023-37211) * Mozilla: Fullscreen notification obscured (CVE-2023-37207) * Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-04018 bdu:2023-04018 2026-10-03T13:21:13.413392+00:00 bdu:2023-04018 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0509 certfr-2023-avi-0509 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Mozilla</span>. Elles permettent… 2026-10-03T13:21:13.413410+00:00 certfr-2023-avi-0509 https://cve.radiocsirt.org/vuln/euvd-2026-203174 EUVD-2026-203174 2026-10-03T13:21:13.413427+00:00 EUVD-2026-203174 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37208 fkie_cve-2023-37208 2026-10-03T13:21:13.413439+00:00

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

 https://cve.radiocsirt.org/vuln/ghsa-7f9h-g35v-jfqh GHSA-7f9h-g35v-jfqh 2026-10-03T13:21:13.413461+00:00

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

 https://cve.radiocsirt.org/vuln/gsd-2023-37208 gsd-2023-37208 2026-10-03T13:21:13.413476+00:00 gsd-2023-37208 https://cve.radiocsirt.org/vuln/oesa-2023-1671 OESA-2023-1671 — firefox security update 2026-10-03T13:21:13.413486+00:00

Affected: openEuler:22.03-LTS-SP2: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fix(es): An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox &lt; 115, Firefox ESR &lt; 102.13, and Thunderbird &lt; 102.13.(CVE-2023-37201) Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox &lt; 115, Firefox ESR &lt; 102.13, and Thunderbird &lt; 102.13.(CVE-2023-37202) A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox &lt; 115, Firefox ESR &lt; 102.13, and Thunderbird &lt; 102.13.(CVE-2023-37207) When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox &lt; 115, Firefox ESR &lt; 102.13, and Thunderbird &lt; 102.13.(CVE-2023-37208) Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corrup…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13037-1 openSUSE-SU-2024:13037-1 — MozillaFirefox-115.0-1.1 on GA media 2026-10-03T13:21:13.413532+00:00

MozillaFirefox-115.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:4065 RHSA-2023:4065 — Red Hat Security Advisory: thunderbird security update 2026-10-03T13:21:13.413557+00:00

Mozilla: Use-after-free in WebRTC certificate generation Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey Mozilla: Fullscreen notification obscured Mozilla: Lack of warning when opening Diagcab files Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13

 https://cve.radiocsirt.org/vuln/suse-su-2023:2849-1 SUSE-SU-2023:2849-1 — Security update for MozillaFirefox, MozillaFirefox-branding-SLE 2026-10-03T13:21:13.413579+00:00

Security update for MozillaFirefox, MozillaFirefox-branding-SLE

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-37208 UBUNTU-CVE-2023-37208 2026-10-03T13:21:13.413601+00:00

Affected: Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1663 WID-SEC-W-2023-1663 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-03T13:21:13.413631+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder Dateien zu manipulieren.