https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:19:52.261285+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:7500 ALSA-2023:7500 — Important: thunderbird security update 2026-10-03T19:19:52.784506+00:00

Affected: AlmaLinux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.5.0.

Security Fix(es):

* Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204) * Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205) * Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206) * Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207) * Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212) * Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208) * Mozilla: Incorrect parsing of relative URLs starting with "///" (CVE-2023-6209)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-08088 bdu:2023-08088 2026-10-03T19:19:52.784593+00:00 bdu:2023-08088 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0969 certfr-2023-avi-0969 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Mozilla</span>. Certaines d'entr… 2026-10-03T19:19:52.784612+00:00 certfr-2023-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-217064 EUVD-2026-217064 2026-10-03T19:19:52.784629+00:00 EUVD-2026-217064 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6208 fkie_cve-2023-6208 2026-10-03T19:19:52.784640+00:00

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

 https://cve.radiocsirt.org/vuln/ghsa-gvr6-g64h-9mj2 GHSA-gvr6-g64h-9mj2 2026-10-03T19:19:52.784664+00:00

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Thunderbird on X11. Other systems are unaffected.* This vulnerability affects Firefox < 120, Firefox < 115.5, and Thunderbird < 115.5.0.

 https://cve.radiocsirt.org/vuln/gsd-2023-6208 gsd-2023-6208 2026-10-03T19:19:52.784679+00:00 gsd-2023-6208 https://cve.radiocsirt.org/vuln/msrc_cve-2023-6208 msrc_CVE-2023-6208 — When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a… 2026-10-03T19:19:52.784690+00:00 msrc_CVE-2023-6208 https://cve.radiocsirt.org/vuln/oesa-2025-1322 OESA-2025-1322 — firefox security update 2026-10-03T19:19:52.784707+00:00

Affected: openEuler:22.03-LTS-SP3: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

Multiple NSS NIST curves were susceptible to a side-channel attack known as &quot;Minerva&quot;. This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox &lt; 121.(CVE-2023-6135)

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox &lt; 120, Firefox ESR &lt; 115.5.0, and Thunderbird &lt; 115.5.(CVE-2023-6207)

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox &lt; 120, Firefox ESR &lt; 115.5.0, and Thunderbird &lt; 115.5.(CVE-2023-6208)

Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal &quot;/../&quot; part in the path could be used to override the specified host…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13459-1 openSUSE-SU-2024:13459-1 — MozillaThunderbird-115.5.0-1.1 on GA media 2026-10-03T19:19:52.784775+00:00

MozillaThunderbird-115.5.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:7499 RHSA-2023:7499 — Red Hat Security Advisory: thunderbird security update 2026-10-03T19:19:52.784796+00:00

Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer Mozilla: Use-after-free in MessagePort::Entangled Mozilla: Clickjacking permission prompts using the fullscreen transition Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer Mozilla: Using Selection API would copy contents into X11 primary selection. Mozilla: Incorrect parsing of relative URLs starting with "///" Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5

 https://cve.radiocsirt.org/vuln/suse-su-2023:4912-1 SUSE-SU-2023:4912-1 — Security update for MozillaFirefox 2026-10-03T19:19:52.784823+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6208 UBUNTU-CVE-2023-6208 2026-10-03T19:19:52.784845+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird and 2 more

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2995 WID-SEC-W-2023-2995 — Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird: Mehrere Schwachstellen 2026-10-03T19:19:52.784879+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.