https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:48:35.358411+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:0080 ALSA-2025:0080 — Important: firefox security update 2026-10-04T12:48:35.389034+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: Use-after-free when breaking lines in text (CVE-2025-0238) * firefox: Memory corruption when using JavaScript Text Segmentation (CVE-2025-0241) * firefox: Alt-Svc ALPN validation failure when redirected (CVE-2025-0239) * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 (CVE-2025-0243) * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242) * firefox: WebChannel APIs susceptible to confused deputy attack (CVE-2025-0237) * firefox: Compartment mismatch when parsing JavaScript JSON module (CVE-2025-0240)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-00154 bdu:2025-00154 2026-10-04T12:48:35.389108+00:00 bdu:2025-00154 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0009 certfr-2025-avi-0009 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-04T12:48:35.389131+00:00 certfr-2025-avi-0009 https://cve.radiocsirt.org/vuln/euvd-2026-290742 EUVD-2026-290742 2026-10-04T12:48:35.389168+00:00 EUVD-2026-290742 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0238 fkie_cve-2025-0238 2026-10-04T12:48:35.389180+00:00

Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Firefox ESR 115.19, Thunderbird 134, and Thunderbird 128.6.

 https://cve.radiocsirt.org/vuln/ghsa-phcc-6pmp-qw9v GHSA-phcc-6pmp-qw9v 2026-10-04T12:48:35.389217+00:00

Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, and Firefox ESR < 115.19.

 https://cve.radiocsirt.org/vuln/ncsc-2025-0016 NCSC-2025-0016 — Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird 2026-10-04T12:48:35.389233+00:00 NCSC-2025-0016 https://cve.radiocsirt.org/vuln/oesa-2025-1049 OESA-2025-1049 — firefox security update 2026-10-04T12:48:35.389264+00:00

Affected: openEuler:24.03-LTS-SP1: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es): Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability affects Firefox &amp;lt; 134, Firefox ESR &amp;lt; 128.6, and Firefox ESR &amp;lt; 115.19.(CVE-2025-0238) When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability affects Firefox &amp;lt; 134 and Firefox ESR &amp;lt; 128.6.(CVE-2025-0239) Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability affects Firefox &amp;lt; 134 and Firefox ESR &amp;lt; 128.6.(CVE-2025-0240) Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &amp;lt; 134 and Firefox ESR &amp;lt; 128.6.(CVE-2025-0243)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14619-1 openSUSE-SU-2025:14619-1 — firefox-esr-128.6.0-1.1 on GA media 2026-10-04T12:48:35.389293+00:00

firefox-esr-128.6.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:0132 RHSA-2025:0132 — Red Hat Security Advisory: firefox security update 2026-10-04T12:48:35.389313+00:00

firefox: thunderbird: WebChannel APIs susceptible to confused deputy attack firefox: thunderbird: Use-after-free when breaking lines in text firefox: Alt-Svc ALPN validation failure when redirected firefox: Compartment mismatch when parsing JavaScript JSON module firefox: Memory corruption when using JavaScript Text Segmentation firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6

 https://cve.radiocsirt.org/vuln/suse-su-2025:0056-1 SUSE-SU-2025:0056-1 — Security update for MozillaFirefox 2026-10-04T12:48:35.389339+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-0238 UBUNTU-CVE-2025-0238 2026-10-04T12:48:35.389356+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102 and 1 more

Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Firefox ESR 115.19, Thunderbird 134, and Thunderbird 128.6.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0026 WID-SEC-W-2025-0026 — Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen 2026-10-04T12:48:35.389390+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Firefox ESR und Thunderbird ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen oder Spoofing-Angriffe durchzuführen.