https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:55:39.299627+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:14416 ALSA-2025:14416 — Important: firefox security update 2026-10-03T18:55:39.331456+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVE-2025-9182) * thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component (CVE-2025-9179) * thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component (CVE-2025-9180) * thunderbird: firefox: Uninitialized memory in the JavaScript Engine component (CVE-2025-9181) * thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVE-2025-9185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-10388 bdu:2025-10388 2026-10-03T18:55:39.331524+00:00 bdu:2025-10388 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T18:55:39.331542+00:00 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/euvd-2026-290733 EUVD-2026-290733 2026-10-03T18:55:39.331558+00:00 EUVD-2026-290733 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9182 fkie_cve-2025-9182 2026-10-03T18:55:39.331569+00:00

Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2.

 https://cve.radiocsirt.org/vuln/ghsa-mv5m-p837-6xm9 GHSA-mv5m-p837-6xm9 2026-10-03T18:55:39.331590+00:00

'Denial-of-service due to out-of-memory in the Graphics: WebRender component.' This vulnerability affects Firefox < 142, Firefox ESR < 140.2, Thunderbird < 142, and Thunderbird < 140.2.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15467-1 openSUSE-SU-2025:15467-1 — firefox-esr-140.2.0-1.1 on GA media 2026-10-03T18:55:39.331605+00:00

firefox-esr-140.2.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:14417 RHSA-2025:14417 — Red Hat Security Advisory: firefox security update 2026-10-03T18:55:39.331624+00:00

thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component thunderbird: firefox: Uninitialized memory in the JavaScript Engine component firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142

 https://cve.radiocsirt.org/vuln/suse-su-2025:03009-1 SUSE-SU-2025:03009-1 — Security update for MozillaFirefox 2026-10-03T18:55:39.331648+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-9182 UBUNTU-CVE-2025-9182 2026-10-03T18:55:39.331664+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1866 WID-SEC-W-2025-1866 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-03T18:55:39.331693+00:00

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.