https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:17:59.222155+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:11747 ALSA-2025:11747 — Important: firefox security update 2026-10-04T08:17:59.261361+00:00

Affected: AlmaLinux:8: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Large branch table could lead to truncated instruction (CVE-2025-8028) * firefox: thunderbird: Memory safety bugs (CVE-2025-8035) * firefox: thunderbird: Incorrect URL stripping in CSP reports (CVE-2025-8031) * firefox: thunderbird: JavaScript engine only wrote partial return value to stack (CVE-2025-8027) * firefox: thunderbird: Potential user-assisted code execution in ?Copy as cURL? command (CVE-2025-8030) * firefox: Memory safety bugs (CVE-2025-8034) * firefox: thunderbird: Incorrect JavaScript state machine for generators (CVE-2025-8033) * firefox: thunderbird: XSLT documents could bypass CSP (CVE-2025-8032) * firefox: thunderbird: javascript: URLs executed on object and embed tags (CVE-2025-8029)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-10487 bdu:2025-10487 2026-10-04T08:17:59.261436+00:00 bdu:2025-10487 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0615 certfr-2025-avi-0615 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-04T08:17:59.261466+00:00 certfr-2025-avi-0615 https://cve.radiocsirt.org/vuln/cnvd-2025-20064 cnvd-2025-20064 2026-10-04T08:17:59.261533+00:00 cnvd-2025-20064 https://cve.radiocsirt.org/vuln/euvd-2026-342397 EUVD-2026-342397 2026-10-04T08:17:59.261552+00:00 EUVD-2026-342397 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8032 fkie_cve-2025-8032 2026-10-04T08:17:59.261571+00:00

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.

 https://cve.radiocsirt.org/vuln/ghsa-hxr8-chw2-2wqc GHSA-hxr8-chw2-2wqc 2026-10-04T08:17:59.261605+00:00

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

 https://cve.radiocsirt.org/vuln/oesa-2025-1933 OESA-2025-1933 — firefox security update 2026-10-04T08:17:59.261633+00:00

Affected: openEuler:22.03-LTS-SP3: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

A vulnerability was found in Mozilla Thunderbird up to 140 on 64-bit (Mail Client Software). It has been classified as critical.CWE is classifying the issue as CWE-252. The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 141 eliminates this vulnerability.(CVE-2025-8027)

A vulnerability was found in Mozilla Firefox up to 140 on ARM64 (Web Browser). It has been declared as critical.The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.As an impact it is known to affect confidentiality, integrity, and availability.Upgrading to version 141 eliminates this vulnerability.(CVE-2025-8028)…

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15371-1 openSUSE-SU-2025:15371-1 — firefox-esr-140.1.0-1.1 on GA media 2026-10-04T08:17:59.261753+00:00

firefox-esr-140.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:11797 RHSA-2025:11797 — Red Hat Security Advisory: firefox security update 2026-10-04T08:17:59.261784+00:00

firefox: thunderbird: JavaScript engine only wrote partial return value to stack firefox: thunderbird: Large branch table could lead to truncated instruction firefox: thunderbird: javascript: URLs executed on object and embed tags firefox: thunderbird: Potential user-assisted code execution in “Copy as cURL” command firefox: thunderbird: Incorrect URL stripping in CSP reports firefox: thunderbird: XSLT documents could bypass CSP firefox: thunderbird: Incorrect JavaScript state machine for generators firefox: thunderbird: Memory safety bugs firefox: thunderbird: Memory safety bugs

 https://cve.radiocsirt.org/vuln/suse-su-2025:02531-1 SUSE-SU-2025:02531-1 — Security update for MozillaFirefox 2026-10-04T08:17:59.261816+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-8032 UBUNTU-CVE-2025-8032 2026-10-04T08:17:59.261836+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1623 WID-SEC-W-2025-1623 — Mozilla Firefox , Firefox ESR und Thunderbird: Mehrere Schwachstellen 2026-10-04T08:17:59.261866+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und andere, nicht näher definierte Angriffe durchzuführen.