https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:54:19.689317+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:0667 ALSA-2026:0667 — Important: firefox security update 2026-10-02T14:54:19.747394+00:00

Affected: AlmaLinux:8: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327) * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (CVE-2026-0891) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-0878) * firefox: Use-after-free in the IPC component (CVE-2026-0882) * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884) * firefox: Information disclosure in the Networking component (CVE-2026-0883) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877) * firefox: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-0890) * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879) * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880) * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) liste…

 https://cve.radiocsirt.org/vuln/bdu:2026-03389 bdu:2026-03389 2026-10-02T14:54:19.747478+00:00 bdu:2026-03389 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0038 certfr-2026-avi-0038 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-02T14:54:19.747496+00:00 certfr-2026-avi-0038 https://cve.radiocsirt.org/vuln/cnvd-2026-11802 cnvd-2026-11802 2026-10-02T14:54:19.747512+00:00 cnvd-2026-11802 https://cve.radiocsirt.org/vuln/euvd-2026-337601 EUVD-2026-337601 2026-10-02T14:54:19.747524+00:00 EUVD-2026-337601 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0882 fkie_cve-2026-0882 2026-10-02T14:54:19.747534+00:00

Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

 https://cve.radiocsirt.org/vuln/ghsa-x4m4-qvvc-5xcm GHSA-x4m4-qvvc-5xcm 2026-10-02T14:54:19.747556+00:00

Use-after-free in the IPC component. This vulnerability affects Firefox < 147, Firefox ESR < 115.32, and Firefox ESR < 140.7.

 https://cve.radiocsirt.org/vuln/oesa-2026-1085 OESA-2026-1085 — firefox security update 2026-10-02T14:54:19.747571+00:00

Affected: openEuler:24.03-LTS-SP1: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

Use-after-free vulnerability in the WebRTC Signaling component of Firefox browser. This vulnerability affects Firefox versions prior to 146 and Firefox ESR versions prior to 140.6.(CVE-2025-14321)

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability affects Firefox &lt; 146, Firefox ESR &lt; 115.31, and Firefox ESR &lt; 140.6.(CVE-2025-14322)

Privilege escalation in the DOM: Notifications component. This vulnerability affects Firefox &lt; 146, Firefox ESR &lt; 115.31, and Firefox ESR &lt; 140.6.(CVE-2025-14323)

A JIT (Just-In-Time) miscompilation vulnerability exists in the JavaScript Engine component of Mozilla Firefox. This vulnerability affects Firefox &lt; 146, Firefox ESR &lt; 115.31, and Firefox ESR &lt; 140.6. An attacker could potentially exploit this vulnerability to cause memory corruption or execute arbitrary code.(CVE-2025-14324)

JIT miscompilation…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10037-1 openSUSE-SU-2026:10037-1 — firefox-esr-140.7.0-1.1 on GA media 2026-10-02T14:54:19.747622+00:00

firefox-esr-140.7.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:1413 RHSA-2026:1413 — Red Hat Security Advisory: thunderbird security update 2026-10-02T14:54:19.747646+00:00

firefox: Spoofing issue in the Downloads Panel component firefox: thunderbird: Mitigation bypass in the DOM: Security component firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component firefox: thunderbird: Sandbox escape due to integer overflow in the Graphics component firefox: thunderbird: Use-after-free in the IPC component firefox: thunderbird: Information disclosure in the Networking component firefox: thunderbird: Use-after-free in the JavaScript Engine component firefox: thunderbird: Use-after-free in the JavaScript: GC component firefox: thunderbird: Incorrect boundary conditions in the Graphics component firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component firefox: thunderbird: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147

 https://cve.radiocsirt.org/vuln/suse-su-2026:0122-1 SUSE-SU-2026:0122-1 — Security update for MozillaFirefox 2026-10-02T14:54:19.747682+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-0882 UBUNTU-CVE-2026-0882 2026-10-02T14:54:19.747700+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0090 WID-SEC-W-2026-0090 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-02T14:54:19.747730+00:00

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Thunderbird ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Spoofing-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, Speicherbeschädigungen zu verursachen, die möglicherweise zur Ausführung von beliebigem Code führen, oder andere nicht näher definierte Angriffe durchzuführen.