https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:48:12.238194+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:8049 ALSA-2025:8049 — Important: firefox security update 2026-10-03T01:48:12.789437+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: Out-of-bounds access when resolving Promise objects (CVE-2025-4918) * firefox: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-06048 bdu:2025-06048 2026-10-03T01:48:12.789520+00:00 bdu:2025-06048 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0424 certfr-2025-avi-0424 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Elles permettent à un attaquant de provoquer… 2026-10-03T01:48:12.789556+00:00 certfr-2025-avi-0424 https://cve.radiocsirt.org/vuln/euvd-2026-290671 EUVD-2026-290671 2026-10-03T01:48:12.789582+00:00 EUVD-2026-290671 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4919 fkie_cve-2025-4919 2026-10-03T01:48:12.789599+00:00

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2.

 https://cve.radiocsirt.org/vuln/ghsa-f333-vhwv-jvmx GHSA-f333-vhwv-jvmx 2026-10-03T01:48:12.789633+00:00

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox ESR < 115.23.1.

 https://cve.radiocsirt.org/vuln/oesa-2025-1545 OESA-2025-1545 — firefox security update 2026-10-03T01:48:12.789661+00:00

Affected: openEuler:22.03-LTS-SP3: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es):

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox &lt; 138.0.4, Firefox ESR &lt; 128.10.1, Firefox ESR &lt; 115.23.1, Thunderbird &lt; 128.10.2, and Thunderbird &lt; 138.0.2.(CVE-2025-4918)

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox &lt; 138.0.4, Firefox ESR &lt; 128.10.1, Firefox ESR &lt; 115.23.1, Thunderbird &lt; 128.10.2, and Thunderbird &lt; 138.0.2.(CVE-2025-4919)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15133-1 openSUSE-SU-2025:15133-1 — firefox-esr-128.10.1-1.1 on GA media 2026-10-03T01:48:12.789716+00:00

firefox-esr-128.10.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:8125 RHSA-2025:8125 — Red Hat Security Advisory: firefox security update 2026-10-03T01:48:12.789744+00:00

firefox: thunderbird: Out-of-bounds access when resolving Promise objects firefox: thunderbird: Out-of-bounds access when optimizing linear sums

 https://cve.radiocsirt.org/vuln/suse-su-2025:01710-1 SUSE-SU-2025:01710-1 — Security update for MozillaFirefox 2026-10-03T01:48:12.789777+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4919 UBUNTU-CVE-2025-4919 2026-10-03T01:48:12.789806+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1097 WID-SEC-W-2025-1097 — Mozilla Firefox / Thunderbird: Mehrere Schwachstellen 2026-10-03T01:48:12.789863+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox / Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial-of-Service auszuführen.