https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:59:46.220168+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:4952 ALSA-2023:4952 — Important: firefox security update 2026-10-03T08:59:46.368148+00:00

Affected: AlmaLinux:8: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.15.0 ESR.

Security Fix(es):

* Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573) * Mozilla: Memory corruption in IPC ColorPickerShownCallback (CVE-2023-4574) * Mozilla: Memory corruption in IPC FilePickerShownCallback (CVE-2023-4575) * Mozilla: Memory corruption in JIT UpdateRegExpStatics (CVE-2023-4577) * Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (CVE-2023-4584) * Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVE-2023-4585) * Mozilla: Full screen notification obscured by file open dialog (CVE-2023-4051) * Mozilla: Full screen notification obscured by external program (CVE-2023-4053) * Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (CVE-2023-4578) * Mozilla: Push notifications saved to disk unencrypted (CVE-2023-4580) * Mozilla: XLL file extensions were downloadable without warnings (CVE-2023-4581) * Mozilla: Browsing Context potentially not cleared when closing Private Window (CVE-2023-4583)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-05102 bdu:2023-05102 2026-10-03T08:59:46.368229+00:00 bdu:2023-05102 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0695 certfr-2023-avi-0695 — De multiples vulnérabilités ont été découvertes dans<span class="textit"> les produits Mozilla</span>. Certaines d'entr… 2026-10-03T08:59:46.368246+00:00 certfr-2023-avi-0695 https://cve.radiocsirt.org/vuln/cnvd-2023-75345 cnvd-2023-75345 2026-10-03T08:59:46.368263+00:00 cnvd-2023-75345 https://cve.radiocsirt.org/vuln/euvd-2026-264021 EUVD-2026-264021 2026-10-03T08:59:46.368275+00:00 EUVD-2026-264021 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4584 fkie_cve-2023-4584 2026-10-03T08:59:46.368285+00:00

Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.

 https://cve.radiocsirt.org/vuln/ghsa-rcxp-78cq-8wg3 GHSA-rcxp-78cq-8wg3 2026-10-03T08:59:46.368309+00:00

Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, and Thunderbird < 115.2.

 https://cve.radiocsirt.org/vuln/gsd-2023-4584 gsd-2023-4584 2026-10-03T08:59:46.368326+00:00 gsd-2023-4584 https://cve.radiocsirt.org/vuln/oesa-2023-1711 OESA-2023-1711 — firefox security update 2026-10-03T08:59:46.368336+00:00

Affected: openEuler:22.03-LTS-SP1: firefox

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fix(es): When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox &lt; 117, Firefox ESR &lt; 102.15, Firefox ESR &lt; 115.2, Thunderbird &lt; 102.15, and Thunderbird &lt; 115.2.(CVE-2023-4573) When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox &lt; 117, Firefox ESR &lt; 102.15, Firefox ESR &lt; 115.2, Thunderbird &lt; 102.15, and Thunderbird &lt; 115.2.(CVE-2023-4574) When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox &lt; 117, Firefox ESR &lt; 102.15, Firefox ESR &lt; 115.2, Thunderbird &lt; 102.15, and Thunderbird &lt; 115.2.(CVE-2023-4575) Excel `.xll` add-in files did not have…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13176-1 openSUSE-SU-2024:13176-1 — MozillaFirefox-117.0-1.1 on GA media 2026-10-03T08:59:46.368374+00:00

MozillaFirefox-117.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:4946 RHSA-2023:4946 — Red Hat Security Advisory: thunderbird security update 2026-10-03T08:59:46.368399+00:00

Mozilla: Full screen notification obscured by file open dialog Mozilla: Full screen notification obscured by external program Mozilla: Memory corruption in IPC CanvasTranslator Mozilla: Memory corruption in IPC ColorPickerShownCallback Mozilla: Memory corruption in IPC FilePickerShownCallback Mozilla: Memory corruption in JIT UpdateRegExpStatics Mozilla: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception Mozilla: Push notifications saved to disk unencrypted Mozilla: XLL file extensions were downloadable without warnings Mozilla: Browsing Context potentially not cleared when closing Private Window Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 Mozilla: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2

 https://cve.radiocsirt.org/vuln/suse-su-2023:3559-1 SUSE-SU-2023:3559-1 — Security update for MozillaFirefox 2026-10-03T08:59:46.368433+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4584 UBUNTU-CVE-2023-4584 2026-10-03T08:59:46.368453+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird and 1 more

Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2202 WID-SEC-W-2023-2202 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-03T08:59:46.368489+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.