https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:46:23.584122+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:0080 ALSA-2025:0080 — Important: firefox security update 2026-10-04T17:46:23.615642+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: Use-after-free when breaking lines in text (CVE-2025-0238) * firefox: Memory corruption when using JavaScript Text Segmentation (CVE-2025-0241) * firefox: Alt-Svc ALPN validation failure when redirected (CVE-2025-0239) * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 (CVE-2025-0243) * firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 (CVE-2025-0242) * firefox: WebChannel APIs susceptible to confused deputy attack (CVE-2025-0237) * firefox: Compartment mismatch when parsing JavaScript JSON module (CVE-2025-0240)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-02402 bdu:2025-02402 2026-10-04T17:46:23.615713+00:00 bdu:2025-02402 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0009 certfr-2025-avi-0009 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-04T17:46:23.615730+00:00 certfr-2025-avi-0009 https://cve.radiocsirt.org/vuln/euvd-2026-290773 EUVD-2026-290773 2026-10-04T17:46:23.615746+00:00 EUVD-2026-290773 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0241 fkie_cve-2025-0241 2026-10-04T17:46:23.615757+00:00

When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.

 https://cve.radiocsirt.org/vuln/ghsa-hh4j-jwjv-8726 GHSA-hh4j-jwjv-8726 2026-10-04T17:46:23.615779+00:00

When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 134 and Firefox ESR < 128.6.

 https://cve.radiocsirt.org/vuln/ncsc-2025-0016 NCSC-2025-0016 — Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird 2026-10-04T17:46:23.615793+00:00 NCSC-2025-0016 https://cve.radiocsirt.org/vuln/oesa-2025-1085 OESA-2025-1085 — firefox security update 2026-10-04T17:46:23.615820+00:00

Affected: openEuler:24.03-LTS: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es):

The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability affects Firefox &lt; 134, Firefox ESR &lt; 128.6, Thunderbird &lt; 134, and Thunderbird &lt; 128.6.(CVE-2025-0237)

When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox &lt; 134, Firefox ESR &lt; 128.6, Thunderbird &lt; 134, and Thunderbird &lt; 128.6.(CVE-2025-0241)

Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 134, Firefox ESR &lt; 128.6, Firefox ESR &lt; 115.19, Thunderbird &lt; 134, and Thunderbird &lt; 128.6.(CVE-2025-0242)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14619-1 openSUSE-SU-2025:14619-1 — firefox-esr-128.6.0-1.1 on GA media 2026-10-04T17:46:23.615850+00:00

firefox-esr-128.6.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:0132 RHSA-2025:0132 — Red Hat Security Advisory: firefox security update 2026-10-04T17:46:23.615869+00:00

firefox: thunderbird: WebChannel APIs susceptible to confused deputy attack firefox: thunderbird: Use-after-free when breaking lines in text firefox: Alt-Svc ALPN validation failure when redirected firefox: Compartment mismatch when parsing JavaScript JSON module firefox: Memory corruption when using JavaScript Text Segmentation firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6 firefox: thunderbird: Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6

 https://cve.radiocsirt.org/vuln/suse-su-2025:0056-1 SUSE-SU-2025:0056-1 — Security update for MozillaFirefox 2026-10-04T17:46:23.615893+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-0241 UBUNTU-CVE-2025-0241 2026-10-04T17:46:23.615910+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102 and 1 more

When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0026 WID-SEC-W-2025-0026 — Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen 2026-10-04T17:46:23.615941+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Firefox ESR und Thunderbird ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen oder Spoofing-Angriffe durchzuführen.