https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:41:02.089772+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2883 ALSA-2024:2883 — Important: firefox security update 2026-10-03T01:41:02.523644+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.11.0 ESR.

Security Fix(es):

* firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) * firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767) * firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768) * firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769) * firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770) * firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-06889 bdu:2024-06889 2026-10-03T01:41:02.523731+00:00 bdu:2024-06889 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0396 certfr-2024-avi-0396 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-03T01:41:02.523750+00:00 certfr-2024-avi-0396 https://cve.radiocsirt.org/vuln/cnvd-2024-23344 cnvd-2024-23344 2026-10-03T01:41:02.523766+00:00 cnvd-2024-23344 https://cve.radiocsirt.org/vuln/euvd-2026-226124 EUVD-2026-226124 2026-10-03T01:41:02.523777+00:00 EUVD-2026-226124 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4767 fkie_cve-2024-4767 2026-10-03T01:41:02.523787+00:00

If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

 https://cve.radiocsirt.org/vuln/ghsa-fffc-4hjp-2r9v GHSA-fffc-4hjp-2r9v 2026-10-03T01:41:02.523809+00:00

If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

 https://cve.radiocsirt.org/vuln/oesa-2024-1786 OESA-2024-1786 — firefox security update 2026-10-03T01:41:02.523825+00:00

Affected: openEuler:24.03-LTS: firefox

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fix(es): There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox &lt; 125, Firefox ESR &lt; 115.10, and Thunderbird &lt; 115.10.(CVE-2024-3302) GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox &lt; 125, Firefox ESR &lt; 115.10, and Thunderbird &lt; 115.10.(CVE-2024-3852) In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox &lt; 125, Firefox ESR &lt; 115.10, and Thunderbird &lt; 115.10.(CVE-2024-3854) On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This vulnerability affects Firefox &lt; 125, Firefox ESR &lt; 115.10, and Thunderbird &lt; 115.10.(CVE-2024-3859) If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free. This vulnerability affects Firefox &lt; 125, Firefox ESR &lt; 115.10, and Thunderbird &lt; 115.10.(CVE-2024-3861) If the `browser.privatebrowsing.autostart` preference is enabled…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13980-1 openSUSE-SU-2024:13980-1 — MozillaFirefox-126.0-1.1 on GA media 2026-10-03T01:41:02.523862+00:00

MozillaFirefox-126.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:2882 RHSA-2024:2882 — Red Hat Security Advisory: firefox security update 2026-10-03T01:41:02.523888+00:00

Mozilla: Arbitrary JavaScript execution in PDF.js Mozilla: IndexedDB files retained in private browsing mode Mozilla: Potential permissions request bypass via clickjacking Mozilla: Cross-origin responses could be distinguished between script and non-script content-types Mozilla: Use-after-free could occur when printing to PDF Mozilla: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11

 https://cve.radiocsirt.org/vuln/suse-su-2024:1676-1 SUSE-SU-2024:1676-1 — Security update for MozillaFirefox 2026-10-03T01:41:02.523913+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-4767 UBUNTU-CVE-2024-4767 2026-10-03T01:41:02.523934+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird and 1 more

If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1151 WID-SEC-W-2024-1151 — Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen 2026-10-03T01:41:02.523967+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting (XSS)-Angriffe durchzuführen.