https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:08:42.745710+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-04499 bdu:2023-04499 2026-10-03T06:08:42.911493+00:00 bdu:2023-04499 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0611 certfr-2023-avi-0611 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-03T06:08:42.911540+00:00 certfr-2023-avi-0611 https://cve.radiocsirt.org/vuln/cnvd-2023-61754 cnvd-2023-61754 2026-10-03T06:08:42.911561+00:00 cnvd-2023-61754 https://cve.radiocsirt.org/vuln/euvd-2026-196734 EUVD-2026-196734 2026-10-03T06:08:42.911574+00:00 EUVD-2026-196734 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4052 fkie_cve-2023-4052 2026-10-03T06:08:42.911585+00:00

The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

 https://cve.radiocsirt.org/vuln/ghsa-gjqm-928w-fr7f GHSA-gjqm-928w-fr7f 2026-10-03T06:08:42.911618+00:00

The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116 and Firefox ESR < 115.1.

 https://cve.radiocsirt.org/vuln/gsd-2023-4052 gsd-2023-4052 2026-10-03T06:08:42.911637+00:00 gsd-2023-4052 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13124-1 openSUSE-SU-2024:13124-1 — MozillaFirefox-116.0.2-1.1 on GA media 2026-10-03T06:08:42.911647+00:00

MozillaFirefox-116.0.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2023:3161-1 SUSE-SU-2023:3161-1 — Security update for MozillaFirefox 2026-10-03T06:08:42.911691+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4052 UBUNTU-CVE-2023-4052 2026-10-03T06:08:42.911713+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:24.04:LTS: mozjs102

The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1934 WID-SEC-W-2023-1934 — Mozilla Firefox und Mozilla Thunderbird: Mehrere Schwachstellen 2026-10-03T06:08:42.911748+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, seine Privilegien zu erweitern, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.