https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:12:26.038189+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:6683 ALSA-2024:6683 — Important: thunderbird security update 2026-10-03T23:12:26.543845+00:00

Affected: AlmaLinux:9: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* thunderbird: 115.15/128.2 () * mozilla: Type confusion when looking up a property name in a "with" block (CVE-2024-8381) * mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran (CVE-2024-8382) * mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions (CVE-2024-8384) * mozilla: WASM type confusion involving ArrayTypes (CVE-2024-8385) * mozilla: SelectElements could be shown over another site if popups are allowed (CVE-2024-8386) * mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 (CVE-2024-8387) * thunderbird: Crash when aborting verification of OTR chat (CVE-2024-8394) * mozilla: Type Confusion in Async Generators in Javascript Engine (CVE-2024-7652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-09443 bdu:2024-09443 2026-10-03T23:12:26.543921+00:00 bdu:2024-09443 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0751 certfr-2024-avi-0751 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-03T23:12:26.543940+00:00 certfr-2024-avi-0751 https://cve.radiocsirt.org/vuln/cnvd-2024-39288 cnvd-2024-39288 2026-10-03T23:12:26.543957+00:00 cnvd-2024-39288 https://cve.radiocsirt.org/vuln/euvd-2026-223661 EUVD-2026-223661 2026-10-03T23:12:26.543968+00:00 EUVD-2026-223661 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8394 fkie_cve-2024-8394 2026-10-03T23:12:26.543979+00:00

When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2.

 https://cve.radiocsirt.org/vuln/ghsa-688v-74jq-v222 GHSA-688v-74jq-v222 2026-10-03T23:12:26.544002+00:00

When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2.

 https://cve.radiocsirt.org/vuln/rhsa-2024:6683 RHSA-2024:6683 — Red Hat Security Advisory: thunderbird security update 2026-10-03T23:12:26.544017+00:00

mozilla: Type Confusion in Async Generators in Javascript Engine mozilla: Type confusion when looking up a property name in a &quot;with&quot; block mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions mozilla: WASM type confusion involving ArrayTypes mozilla: SelectElements could be shown over another site if popups are allowed mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 thunderbird: Crash when aborting verification of OTR chat

 https://cve.radiocsirt.org/vuln/rhsa-2024:6719 RHSA-2024:6719 — Red Hat Security Advisory: thunderbird security update 2026-10-03T23:12:26.544052+00:00

mozilla: Type Confusion in Async Generators in Javascript Engine mozilla: Type confusion when looking up a property name in a &quot;with&quot; block mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran mozilla: Garbage collection could mis-color cross-compartment objects in OOM conditions mozilla: WASM type confusion involving ArrayTypes mozilla: SelectElements could be shown over another site if popups are allowed mozilla: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2 thunderbird: Crash when aborting verification of OTR chat

 https://cve.radiocsirt.org/vuln/suse-su-2024:3507-1 SUSE-SU-2024:3507-1 — Security update for MozillaThunderbird 2026-10-03T23:12:26.544082+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-8394 Withdrawn: UBUNTU-CVE-2024-8394 2026-10-03T23:12:26.544114+00:00

Withdrawn by the publisher.

Affected: Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: thunderbird

When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2038 WID-SEC-W-2024-2038 — Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen 2026-10-03T23:12:26.544137+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder Daten zu manipulieren.