https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:49:47.255002+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-10501 bdu:2025-10501 2026-10-04T00:49:47.425603+00:00 bdu:2025-10501 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-04T00:49:47.425644+00:00 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/cnvd-2025-26892 cnvd-2025-26892 2026-10-04T00:49:47.425665+00:00 cnvd-2025-26892 https://cve.radiocsirt.org/vuln/euvd-2026-290734 EUVD-2026-290734 2026-10-04T00:49:47.425677+00:00 EUVD-2026-290734 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9183 fkie_cve-2025-9183 2026-10-04T00:49:47.425688+00:00

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2.

 https://cve.radiocsirt.org/vuln/ghsa-vhcx-3xrg-8hjg GHSA-vhcx-3xrg-8hjg 2026-10-04T00:49:47.425715+00:00

Spoofing issue in the Address Bar component. This vulnerability affects Firefox < 142 and Firefox ESR < 140.2.

 https://cve.radiocsirt.org/vuln/oesa-2025-2340 OESA-2025-2340 — firefox security update 2026-10-04T00:49:47.425730+00:00

Affected: openEuler:24.03-LTS-SP1: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

This vulnerability affects Firefox versions prior to 143 and Firefox ESR versions prior to 140.3. Specific vulnerability type and impact details require further confirmation.(CVE-2025-10527)

This vulnerability affects Firefox &lt; 143 and Firefox ESR &lt; 140.3.(CVE-2025-10528)

This vulnerability affects Firefox versions earlier than 143 and Firefox ESR versions earlier than 140.3. The vulnerability may lead to security bypass or other security issues.(CVE-2025-10529)

This vulnerability affects Firefox &lt; 143 and Firefox ESR &lt; 140.3.(CVE-2025-10532)

This vulnerability affects Firefox &lt; 143, Firefox ESR &lt; 115.28, and Firefox ESR &lt; 140.3. Specific vulnerability details require further analysis.(CVE-2025-10533)

This vulnerability affects Firefox &lt; 143 and Firefox ESR &lt; 140.3.(CVE-2025-10536)

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Som…

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15467-1 openSUSE-SU-2025:15467-1 — firefox-esr-140.2.0-1.1 on GA media 2026-10-04T00:49:47.425778+00:00

firefox-esr-140.2.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:03009-1 SUSE-SU-2025:03009-1 — Security update for MozillaFirefox 2026-10-04T00:49:47.425800+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-9183 Withdrawn: UBUNTU-CVE-2025-9183 2026-10-04T00:49:47.425820+00:00

Withdrawn by the publisher.

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

Spoofing issue in the Address Bar component. This vulnerability affects Firefox < 142 and Firefox ESR < 140.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1866 WID-SEC-W-2025-1866 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-04T00:49:47.425853+00:00

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.