https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:51:56.852018+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:9118 ALSA-2025:9118 — Important: libvpx security update 2026-10-02T20:51:56.895853+00:00

Affected: AlmaLinux:9: libvpx, AlmaLinux:9: libvpx-devel

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Double-free in libvpx encoder (CVE-2025-5283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-06284 bdu:2025-06284 2026-10-02T20:51:56.895922+00:00 bdu:2025-06284 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0455 certfr-2025-avi-0455 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro… 2026-10-02T20:51:56.895940+00:00 certfr-2025-avi-0455 https://cve.radiocsirt.org/vuln/cnvd-2025-11244 cnvd-2025-11244 2026-10-02T20:51:56.895955+00:00 cnvd-2025-11244 https://cve.radiocsirt.org/vuln/euvd-2026-257981 EUVD-2026-257981 2026-10-02T20:51:56.895967+00:00 EUVD-2026-257981 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5283 fkie_cve-2025-5283 2026-10-02T20:51:56.895976+00:00

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

 https://cve.radiocsirt.org/vuln/ghsa-j84v-78j2-55gh GHSA-j84v-78j2-55gh 2026-10-02T20:51:56.895997+00:00

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

 https://cve.radiocsirt.org/vuln/oesa-2025-1592 OESA-2025-1592 — libvpx security update 2026-10-02T20:51:56.896011+00:00

Affected: openEuler:24.03-LTS-SP1: libvpx, openEuler:20.03-LTS-SP4: libvpx, openEuler:22.03-LTS-SP3: libvpx, openEuler:22.03-LTS-SP4: libvpx, openEuler:24.03-LTS: libvpx

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide. Security Fix(es):

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)(CVE-2025-5283)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15210-1 openSUSE-SU-2025:15210-1 — chromedriver-138.0.7204.96-1.1 on GA media 2026-10-02T20:51:56.896039+00:00

chromedriver-138.0.7204.96-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:8341 RHSA-2025:8341 — Red Hat Security Advisory: firefox security update 2026-10-02T20:51:56.896065+00:00

firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content firefox: thunderbird: Potential local code execution in “Copy as cURL” command firefox: thunderbird: Script element events leaked cross-origin resource status firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details firefox: thunderbird: Memory safety bugs firefox: thunderbird: Memory safety bug libvpx: Double-free in libvpx encoder

 https://cve.radiocsirt.org/vuln/suse-su-2025:21170-1 SUSE-SU-2025:21170-1 — Security update for mozjs128 2026-10-02T20:51:56.896091+00:00

Security update for mozjs128

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-5283 UBUNTU-CVE-2025-5283 2026-10-02T20:51:56.896116+00:00

Affected: Ubuntu:Pro:16.04:LTS: libvpx, Ubuntu:Pro:18.04:LTS: libvpx, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: libvpx, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: libvpx, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78 and 5 more

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1158 WID-SEC-W-2025-1158 — Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-02T20:51:56.896149+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.