https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:14:08.045939+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0358 certfr-2025-avi-0358 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-02T21:14:08.123289+00:00 certfr-2025-avi-0358 https://cve.radiocsirt.org/vuln/euvd-2026-290737 EUVD-2026-290737 2026-10-02T21:14:08.123355+00:00 EUVD-2026-290737 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4086 fkie_cve-2025-4086 2026-10-02T21:14:08.123371+00:00

A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. *This bug only affects Thunderbird for Android. Other versions of Thunderbird are unaffected.*. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

 https://cve.radiocsirt.org/vuln/ghsa-54jr-pmx4-5pvr GHSA-54jr-pmx4-5pvr 2026-10-02T21:14:08.123403+00:00

A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 138 and Thunderbird < 138.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15045-1 openSUSE-SU-2025:15045-1 — MozillaFirefox-138.0-1.1 on GA media 2026-10-02T21:14:08.123420+00:00

MozillaFirefox-138.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4086 Withdrawn: UBUNTU-CVE-2025-4086 2026-10-02T21:14:08.123443+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:18.04:LTS: mozjs52, Ubuntu:Pro:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: mozjs52, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird and 4 more

A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 138 and Thunderbird < 138.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0901 WID-SEC-W-2025-0901 — Mozilla Firefox, Firefox ESR, Thunderbird and Thunderbird ESR: Mehrere Schwachstellen 2026-10-02T21:14:08.123506+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellenin Mozilla Firefox, Firefox ESR, Thunderbird und Thunderbird ESR ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen preiszugeben, Daten zu manipulieren oder andere nicht spezifizierte Angriffe durchzuführen.