https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:21:10.413981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-10457 bdu:2024-10457 2026-10-03T13:21:10.481187+00:00 bdu:2024-10457 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1025 certfr-2024-avi-1025 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-03T13:21:10.481232+00:00 certfr-2024-avi-1025 https://cve.radiocsirt.org/vuln/cnvd-2024-48561 cnvd-2024-48561 2026-10-03T13:21:10.481252+00:00 cnvd-2024-48561 https://cve.radiocsirt.org/vuln/euvd-2026-204807 EUVD-2026-204807 2026-10-03T13:21:10.481265+00:00 EUVD-2026-204807 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11693 fkie_cve-2024-11693 2026-10-03T13:21:10.481275+00:00

The executable file warning was not presented when downloading .library-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

 https://cve.radiocsirt.org/vuln/ghsa-qxf6-g9x3-8w74 GHSA-qxf6-g9x3-8w74 2026-10-03T13:21:10.481306+00:00

The executable file warning was not presented when downloading .library-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

 https://cve.radiocsirt.org/vuln/oesa-2025-1835 OESA-2025-1835 — thunderbird security update 2026-10-03T13:21:10.481322+00:00

Affected: openEuler:24.03-LTS-SP2: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es):

A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox &lt; 132, Firefox ESR &lt; 128.4, Firefox ESR &lt; 115.17, Thunderbird &lt; 128.4, and Thunderbird &lt; 132.(CVE-2024-10458)

An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox &lt; 132, Firefox ESR &lt; 128.4, Firefox ESR &lt; 115.17, Thunderbird &lt; 128.4, and Thunderbird &lt; 132.(CVE-2024-10459)

The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox &lt; 132, Firefox ESR &lt; 128.4, Thunderbird &lt; 128.4, and Thunderbird &lt; 132.(CVE-2024-10460)

In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox &lt; 132, Firefox ESR &lt; 128.4, Thunderbird &lt; 128.4, and Thunderbird &lt; 132.(CVE-2024-10461)

Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox &lt; 132, Firefox ESR &lt; 128.4, Thunderbird &lt; 128.4, and Thunderbird &lt; 132.(CVE-2024-10462)

Video frames could have been leaked between origins in some situations. Thi…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14533-1 openSUSE-SU-2024:14533-1 — MozillaThunderbird-128.5.0-1.1 on GA media 2026-10-03T13:21:10.481497+00:00

MozillaThunderbird-128.5.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:4074-1 SUSE-SU-2024:4074-1 — Security update for MozillaFirefox 2026-10-03T13:21:10.481523+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-11693 Withdrawn: UBUNTU-CVE-2024-11693 2026-10-03T13:21:10.481542+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:18.04:LTS: mozjs52, Ubuntu:Pro:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs52, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.10: mozjs115 and 2 more

The executable file warning was not presented when downloading .library-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3549 WID-SEC-W-2024-3549 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-03T13:21:10.481576+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen oder Cross-Site-Scripting- oder Spoofing-Angriffe durchzuführen.