https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:46:58.239576+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:16108 ALSA-2025:16108 — Important: firefox security update 2026-10-03T23:46:58.392224+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVE-2025-10527) * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2025-10532) * firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component (CVE-2025-10528) * firefox: thunderbird: Same-origin policy bypass in the Layout component (CVE-2025-10529) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 (CVE-2025-10537) * firefox: thunderbird: Information disclosure in the Networking: Cache component (CVE-2025-10536) * firefox: thunderbird: Integer overflow in the SVG component (CVE-2025-10533)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-11384 bdu:2025-11384 2026-10-03T23:46:58.392319+00:00 bdu:2025-11384 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0797 certfr-2025-avi-0797 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-03T23:46:58.392340+00:00 certfr-2025-avi-0797 https://cve.radiocsirt.org/vuln/cnvd-2025-24651 cnvd-2025-24651 2026-10-03T23:46:58.392359+00:00 cnvd-2025-24651 https://cve.radiocsirt.org/vuln/euvd-2026-290727 EUVD-2026-290727 2026-10-03T23:46:58.392372+00:00 EUVD-2026-290727 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10537 fkie_cve-2025-10537 2026-10-03T23:46:58.392383+00:00

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

 https://cve.radiocsirt.org/vuln/ghsa-579p-jcg6-h5r2 GHSA-579p-jcg6-h5r2 2026-10-03T23:46:58.392407+00:00

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.

 https://cve.radiocsirt.org/vuln/oesa-2025-2340 OESA-2025-2340 — firefox security update 2026-10-03T23:46:58.392425+00:00

Affected: openEuler:24.03-LTS-SP1: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

This vulnerability affects Firefox versions prior to 143 and Firefox ESR versions prior to 140.3. Specific vulnerability type and impact details require further confirmation.(CVE-2025-10527)

This vulnerability affects Firefox &lt; 143 and Firefox ESR &lt; 140.3.(CVE-2025-10528)

This vulnerability affects Firefox versions earlier than 143 and Firefox ESR versions earlier than 140.3. The vulnerability may lead to security bypass or other security issues.(CVE-2025-10529)

This vulnerability affects Firefox &lt; 143 and Firefox ESR &lt; 140.3.(CVE-2025-10532)

This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 115.28, and Firefox ESR &lt; 140.3. Specific vulnerability details require further analysis.(CVE-2025-10533)

This vulnerability affects Firefox &lt; 143 and Firefox ESR &lt; 140.3.(CVE-2025-10536)

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Som…

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15555-1 openSUSE-SU-2025:15555-1 — firefox-esr-140.3.0-1.1 on GA media 2026-10-03T23:46:58.392473+00:00

firefox-esr-140.3.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:17340 RHSA-2025:17340 — Red Hat Security Advisory: thunderbird security update 2026-10-03T23:46:58.392497+00:00

idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component firefox: thunderbird: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component firefox: thunderbird: Same-origin policy bypass in the Layout component firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component firefox: thunderbird: Integer overflow in the SVG component firefox: thunderbird: Information disclosure in the Networking: Cache component firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143

 https://cve.radiocsirt.org/vuln/suse-su-2025:03287-1 SUSE-SU-2025:03287-1 — Security update for MozillaFirefox 2026-10-03T23:46:58.392530+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-10537 UBUNTU-CVE-2025-10537 2026-10-03T23:46:58.392550+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2074 WID-SEC-W-2025-2074 — Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen 2026-10-03T23:46:58.392586+00:00

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial-of-Service Angriff durchzuführen, um falsche Informationen darzustellen, um Code auszuführen und um Informationen offenzulegen.