https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:34:18.065030+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:7958 ALSA-2024:7958 — Important: firefox security update 2026-10-03T09:34:18.170786+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-07929 bdu:2024-07929 2026-10-03T09:34:18.170876+00:00 bdu:2024-07929 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0865 certfr-2024-avi-0865 — Une vulnérabilité a été découverte dans Mozilla Firefox. Elle permet à un attaquant de provoquer une exécution de code… 2026-10-03T09:34:18.170896+00:00 certfr-2024-avi-0865 https://cve.radiocsirt.org/vuln/cnvd-2024-40750 cnvd-2024-40750 2026-10-03T09:34:18.170913+00:00 cnvd-2024-40750 https://cve.radiocsirt.org/vuln/euvd-2026-343980 EUVD-2026-343980 2026-10-03T09:34:18.170924+00:00 EUVD-2026-343980 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9680 fkie_cve-2024-9680 2026-10-03T09:34:18.170935+00:00

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

 https://cve.radiocsirt.org/vuln/ghsa-hm3j-qgpw-pj98 GHSA-hm3j-qgpw-pj98 2026-10-03T09:34:18.170960+00:00

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, and Firefox ESR < 115.16.1.

 https://cve.radiocsirt.org/vuln/oesa-2024-2241 OESA-2024-2241 — firefox security update 2026-10-03T09:34:18.170976+00:00

Affected: openEuler:24.03-LTS: firefox

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fix(es): A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox &lt; 130, Firefox ESR &lt; 128.2, and Thunderbird &lt; 128.2.(CVE-2024-8385) If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox &lt; 130, Firefox ESR &lt; 128.2, and Thunderbird &lt; 128.2.(CVE-2024-8386) Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 130, Firefox ESR &lt; 128.2, and Thunderbird &lt; 128.2.(CVE-2024-8387) A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox &lt; 131, Firefox ESR &lt; 128.3, Firefox ESR &lt; 115.16, Thunderbird &lt; 128.3, and Thunderbird &lt; 131.(CVE-2024-9392) It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulner…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14393-1 openSUSE-SU-2024:14393-1 — MozillaFirefox-131.0.2-1.1 on GA media 2026-10-03T09:34:18.171018+00:00

MozillaFirefox-131.0.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhba-2024:8183 RHBA-2024:8183 — Red Hat Bug Fix Advisory: Updated rhel9/firefox-flatpak container image 2026-10-03T09:34:18.171036+00:00

firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill)

 https://cve.radiocsirt.org/vuln/suse-su-2024:3603-1 SUSE-SU-2024:3603-1 — Security update for MozillaFirefox 2026-10-03T09:34:18.171053+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-9680 UBUNTU-CVE-2024-9680 2026-10-03T09:34:18.171073+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird and 2 more

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3138 WID-SEC-W-2024-3138 — Mozilla Firefox, Firefox ESR und Thunderbird: Schwachstelle ermöglicht Codeausführung 2026-10-03T09:34:18.171108+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Mozilla Firefox, Firefox ESR und Thunderbird ausnutzen, um beliebigen Programmcode auszuführen.