https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:01:56.744364+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:4063 ALSA-2023:4063 — Important: thunderbird security update 2026-10-03T14:01:56.832420+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.13.0.

Security Fix(es):

* Mozilla: Use-after-free in WebRTC certificate generation (CVE-2023-37201) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-37202) * Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 (CVE-2023-37211) * Mozilla: Fullscreen notification obscured (CVE-2023-37207) * Mozilla: Lack of warning when opening Diagcab files (CVE-2023-37208)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-04020 bdu:2023-04020 2026-10-03T14:01:56.832504+00:00 bdu:2023-04020 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0509 certfr-2023-avi-0509 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Mozilla</span>. Elles permettent… 2026-10-03T14:01:56.832523+00:00 certfr-2023-avi-0509 https://cve.radiocsirt.org/vuln/cnvd-2023-59026 cnvd-2023-59026 2026-10-03T14:01:56.832539+00:00 cnvd-2023-59026 https://cve.radiocsirt.org/vuln/euvd-2026-216619 EUVD-2026-216619 2026-10-03T14:01:56.832551+00:00 EUVD-2026-216619 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37211 fkie_cve-2023-37211 2026-10-03T14:01:56.832561+00:00

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

 https://cve.radiocsirt.org/vuln/ghsa-xjqq-3xrg-fh6j GHSA-xjqq-3xrg-fh6j 2026-10-03T14:01:56.832585+00:00

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

 https://cve.radiocsirt.org/vuln/gsd-2023-37211 gsd-2023-37211 2026-10-03T14:01:56.832601+00:00 gsd-2023-37211 https://cve.radiocsirt.org/vuln/msrc_cve-2023-37211 msrc_CVE-2023-37211 — Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed eviden… 2026-10-03T14:01:56.832611+00:00 msrc_CVE-2023-37211 https://cve.radiocsirt.org/vuln/oesa-2023-1671 OESA-2023-1671 — firefox security update 2026-10-03T14:01:56.832628+00:00

Affected: openEuler:22.03-LTS-SP2: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fix(es): An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox &lt; 115, Firefox ESR &lt; 102.13, and Thunderbird &lt; 102.13.(CVE-2023-37201) Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox &lt; 115, Firefox ESR &lt; 102.13, and Thunderbird &lt; 102.13.(CVE-2023-37202) A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox &lt; 115, Firefox ESR &lt; 102.13, and Thunderbird &lt; 102.13.(CVE-2023-37207) When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox &lt; 115, Firefox ESR &lt; 102.13, and Thunderbird &lt; 102.13.(CVE-2023-37208) Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corrup…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13037-1 openSUSE-SU-2024:13037-1 — MozillaFirefox-115.0-1.1 on GA media 2026-10-03T14:01:56.832672+00:00

MozillaFirefox-115.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:4065 RHSA-2023:4065 — Red Hat Security Advisory: thunderbird security update 2026-10-03T14:01:56.832720+00:00

Mozilla: Use-after-free in WebRTC certificate generation Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey Mozilla: Fullscreen notification obscured Mozilla: Lack of warning when opening Diagcab files Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13

 https://cve.radiocsirt.org/vuln/suse-su-2023:2849-1 SUSE-SU-2023:2849-1 — Security update for MozillaFirefox, MozillaFirefox-branding-SLE 2026-10-03T14:01:56.832758+00:00

Security update for MozillaFirefox, MozillaFirefox-branding-SLE

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-37211 UBUNTU-CVE-2023-37211 2026-10-03T14:01:56.832779+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1663 WID-SEC-W-2023-1663 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-03T14:01:56.832811+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder Dateien zu manipulieren.