https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:01:19.031399+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:8293 ALSA-2025:8293 — Important: firefox security update 2026-10-02T22:01:19.069132+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267) * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264) * firefox: thunderbird: Memory safety bugs (CVE-2025-5268) * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266) * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263) * firefox: thunderbird: Memory safety bug (CVE-2025-5269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-06223 bdu:2025-06223 2026-10-02T22:01:19.069204+00:00 bdu:2025-06223 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0454 certfr-2025-avi-0454 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-02T22:01:19.069221+00:00 certfr-2025-avi-0454 https://cve.radiocsirt.org/vuln/euvd-2026-290714 EUVD-2026-290714 2026-10-02T22:01:19.069237+00:00 EUVD-2026-290714 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5263 fkie_cve-2025-5263 2026-10-02T22:01:19.069247+00:00

Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.

 https://cve.radiocsirt.org/vuln/ghsa-pjg4-cx24-6mjc GHSA-pjg4-cx24-6mjc 2026-10-02T22:01:19.069268+00:00

Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11.

 https://cve.radiocsirt.org/vuln/oesa-2025-1633 OESA-2025-1633 — firefox security update 2026-10-02T22:01:19.069283+00:00

Affected: openEuler:24.03-LTS-SP1: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es):

Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. This vulnerability affects Firefox &lt; 139, Firefox ESR &lt; 115.24, Firefox ESR &lt; 128.11, Thunderbird &lt; 139, and Thunderbird &lt; 128.11.(CVE-2025-5263)

Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user&apos;s system. This vulnerability affects Firefox &lt; 139, Firefox ESR &lt; 115.24, Firefox ESR &lt; 128.11, Thunderbird &lt; 139, and Thunderbird &lt; 128.11.(CVE-2025-5264)

Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox &lt; 139, Firefox ESR &lt; 128.11, Thunderbird &lt; 139, and Thunderbird &lt; 128.11.(CVE-2025-5266)

A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox &lt; 139, Firefox ESR &lt; 128.11, Thunderbird &lt; 139, and Thunderbird &lt; 128.11.(CVE-2025-5267)

Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. Some of these bugs showed evidence of memory corruption and we…

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15170-1 openSUSE-SU-2025:15170-1 — firefox-esr-128.11.0-1.1 on GA media 2026-10-02T22:01:19.069325+00:00

firefox-esr-128.11.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:8341 RHSA-2025:8341 — Red Hat Security Advisory: firefox security update 2026-10-02T22:01:19.069345+00:00

firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content firefox: thunderbird: Potential local code execution in “Copy as cURL” command firefox: thunderbird: Script element events leaked cross-origin resource status firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details firefox: thunderbird: Memory safety bugs firefox: thunderbird: Memory safety bug libvpx: Double-free in libvpx encoder

 https://cve.radiocsirt.org/vuln/suse-su-2025:01769-1 SUSE-SU-2025:01769-1 — Security update for MozillaFirefox 2026-10-02T22:01:19.069370+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-5263 UBUNTU-CVE-2025-5263 2026-10-02T22:01:19.069387+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1160 WID-SEC-W-2025-1160 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-02T22:01:19.069416+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service auszulösen, Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.