https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:45:36.298186+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:7552 ALSA-2024:7552 — Important: thunderbird security update 2026-10-03T19:45:36.765771+00:00

Affected: AlmaLinux:9: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* thunderbird: 115.16/128.3 () * firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service (CVE-2024-9399) * firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131 (CVE-2024-9403) * firefox: thunderbird: Potential directory upload bypass via clickjacking (CVE-2024-9397) * firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9401) * firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 (CVE-2024-9402) * firefox: thunderbird: External protocol handlers could be enumerated via popups (CVE-2024-9398) * firefox: thunderbird: Potential memory corruption during JIT compilation (CVE-2024-9400) * firefox: thunderbird: Potential memory corruption may occur when cloning certain objects (CVE-2024-9396) * firefox: thunderbird: Cross-origin access to PDF contents through multipart responses (CVE-2024-9393) * firefox: thunderbird: Cross-origin access to JSON contents through multipart responses (CVE-2024-9394) * firefox: thunderbird: Compromised content process can bypass site isolation (CVE-2024-9392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References sect…

 https://cve.radiocsirt.org/vuln/bdu:2024-09310 bdu:2024-09310 2026-10-03T19:45:36.765902+00:00 bdu:2024-09310 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0829 certfr-2024-avi-0829 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-03T19:45:36.765928+00:00 certfr-2024-avi-0829 https://cve.radiocsirt.org/vuln/euvd-2026-223687 EUVD-2026-223687 2026-10-03T19:45:36.765957+00:00 EUVD-2026-223687 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9403 fkie_cve-2024-9403 2026-10-03T19:45:36.765976+00:00

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131 and Thunderbird < 131.

 https://cve.radiocsirt.org/vuln/ghsa-94mm-6r76-6pgh GHSA-94mm-6r76-6pgh 2026-10-03T19:45:36.766017+00:00

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131 and Thunderbird < 131.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14385-1 openSUSE-SU-2024:14385-1 — MozillaFirefox-131.0-1.1 on GA media 2026-10-03T19:45:36.766044+00:00

MozillaFirefox-131.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:7621 RHSA-2024:7621 — Red Hat Security Advisory: firefox security update 2026-10-03T19:45:36.766086+00:00

firefox: Clipboard write permission bypass firefox: thunderbird: Compromised content process can bypass site isolation firefox: thunderbird: Cross-origin access to PDF contents through multipart responses firefox: thunderbird: Cross-origin access to JSON contents through multipart responses firefox: thunderbird: Potential memory corruption may occur when cloning certain objects firefox: thunderbird: Potential directory upload bypass via clickjacking firefox: thunderbird: External protocol handlers could be enumerated via popups firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service firefox: thunderbird: Potential memory corruption during JIT compilation firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 firefox: thunderbird: Memory safety bugs fixed in Firefox 131 and Thunderbird 131

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-9403 UBUNTU-CVE-2024-9403 2026-10-03T19:45:36.766162+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102 and 1 more

Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131 and Thunderbird < 131.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3057 WID-SEC-W-2024-3057 — Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen 2026-10-03T19:45:36.766231+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, einen Denial-of-Service-Zustand zu erzeugen und vertrauliche Informationen preiszugeben.