https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:32:27.190651+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:1066 ALSA-2025:1066 — Important: firefox security update 2026-10-04T09:32:27.370378+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 (CVE-2025-1017) * firefox: thunderbird: Use-after-free in Custom Highlight (CVE-2025-1010) * firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 (CVE-2025-1016) * firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows (CVE-2025-1013) * firefox: thunderbird: A bug in WebAssembly code generation could result in a crash (CVE-2025-1011) * firefox: thunderbird: Use-after-free in XSLT (CVE-2025-1009) * firefox: thunderbird: Certificate length was not properly checked (CVE-2025-1014) * firefox: thunderbird: Use-after-free during concurrent delazification (CVE-2025-1012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-02317 bdu:2025-02317 2026-10-04T09:32:27.370456+00:00 bdu:2025-02317 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0097 certfr-2025-avi-0097 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-04T09:32:27.370475+00:00 certfr-2025-avi-0097 https://cve.radiocsirt.org/vuln/cnvd-2025-18674 cnvd-2025-18674 2026-10-04T09:32:27.370492+00:00 cnvd-2025-18674 https://cve.radiocsirt.org/vuln/euvd-2026-290653 EUVD-2026-290653 2026-10-04T09:32:27.370505+00:00 EUVD-2026-290653 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1016 fkie_cve-2025-1016 2026-10-04T09:32:27.370515+00:00

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.

 https://cve.radiocsirt.org/vuln/ghsa-mh3f-c34v-4q6q GHSA-mh3f-c34v-4q6q 2026-10-04T09:32:27.370538+00:00

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

 https://cve.radiocsirt.org/vuln/oesa-2025-1108 OESA-2025-1108 — firefox security update 2026-10-04T09:32:27.370556+00:00

Affected: openEuler:24.03-LTS: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es):

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox &lt; 135, Firefox ESR &lt; 115.20, Firefox ESR &lt; 128.7, Thunderbird &lt; 128.7, and Thunderbird &lt; 135.(CVE-2025-1016)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14727-1 openSUSE-SU-2025:14727-1 — firefox-esr-128.7.0-1.1 on GA media 2026-10-04T09:32:27.370581+00:00

firefox-esr-128.7.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:1132 RHSA-2025:1132 — Red Hat Security Advisory: firefox security update 2026-10-04T09:32:27.370603+00:00

firefox: thunderbird: Use-after-free in XSLT firefox: thunderbird: Use-after-free in Custom Highlight firefox: thunderbird: A bug in WebAssembly code generation could result in a crash firefox: thunderbird: Use-after-free during concurrent delazification firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows firefox: thunderbird: Certificate length was not properly checked firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7 firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7

 https://cve.radiocsirt.org/vuln/suse-su-2025:0391-1 SUSE-SU-2025:0391-1 — Security update for MozillaFirefox 2026-10-04T09:32:27.370637+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-1016 UBUNTU-CVE-2025-1016 2026-10-04T09:32:27.370657+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102 and 1 more

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0262 WID-SEC-W-2025-0262 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-04T09:32:27.370693+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu erzeugen oder Spoofing-Angriffe durchzuführen.