https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:29:31.420996+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:1484 ALSA-2024:1484 — Critical: firefox security update 2026-10-03T13:29:31.761150+00:00

Affected: AlmaLinux:8: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.9.1 ESR.

Security Fix(es):

* nss: timing attack against RSA decryption (CVE-2023-5388) * Mozilla: Crash in NSS TLS method (CVE-2024-0743) * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607) * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608) * Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616) * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610) * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions (CVE-2024-2611) * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612) * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 (CVE-2024-2614) * Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-02304 bdu:2024-02304 2026-10-03T13:29:31.761230+00:00 bdu:2024-02304 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0246 certfr-2024-avi-0246 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Elles permettent à un attaquant de provoquer une… 2026-10-03T13:29:31.761247+00:00 certfr-2024-avi-0246 https://cve.radiocsirt.org/vuln/cnvd-2024-25602 cnvd-2024-25602 2026-10-03T13:29:31.761265+00:00 cnvd-2024-25602 https://cve.radiocsirt.org/vuln/euvd-2026-222757 EUVD-2026-222757 2026-10-03T13:29:31.761278+00:00 EUVD-2026-222757 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29944 fkie_cve-2024-29944 2026-10-03T13:29:31.761288+00:00

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox < 124.0.1 and Firefox ESR < 115.9.1.

 https://cve.radiocsirt.org/vuln/ghsa-cm37-53wc-mx6g GHSA-cm37-53wc-mx6g 2026-10-03T13:29:31.761312+00:00

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. This vulnerability affects Firefox < 124.0.1 and Firefox ESR < 115.9.1.

 https://cve.radiocsirt.org/vuln/gsd-2024-29944 gsd-2024-29944 2026-10-03T13:29:31.761326+00:00 gsd-2024-29944 https://cve.radiocsirt.org/vuln/oesa-2024-2063 OESA-2024-2063 — firefox security update 2026-10-03T13:29:31.761337+00:00

Affected: openEuler:24.03-LTS: firefox

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fix(es): An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox &lt; 124.0.1 and Firefox ESR &lt; 115.9.1.(CVE-2024-29944)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13795-1 openSUSE-SU-2024:13795-1 — MozillaFirefox-124.0.1-1.1 on GA media 2026-10-03T13:29:31.761360+00:00

MozillaFirefox-124.0.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:1483 RHSA-2024:1483 — Red Hat Security Advisory: firefox security update 2026-10-03T13:29:31.761383+00:00

nss: timing attack against RSA decryption Mozilla: Crash in NSS TLS method Mozilla: JIT code failed to save return registers on Armv7-A Mozilla: Integer overflow could have led to out of bounds write Mozilla: Improper handling of html and body tags enabled CSP nonce leakage Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions Mozilla: Self referencing object could have potentially led to a use-after-free Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 Mozilla: Improve handling of out-of-memory conditions in ICU Mozilla: Privileged JavaScript Execution via Event Handlers

 https://cve.radiocsirt.org/vuln/suse-su-2024:1000-1 SUSE-SU-2024:1000-1 — Security update for MozillaFirefox 2026-10-03T13:29:31.761415+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-29944 UBUNTU-CVE-2024-29944 2026-10-03T13:29:31.761429+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:24.04:LTS: mozjs102

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox < 124.0.1 and Firefox ESR < 115.9.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0703 WID-SEC-W-2024-0703 — Mozilla Firefox und Firefox ESR: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-03T13:29:31.761460+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um beliebigen Programmcode auszuführen.