https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:35:13.971981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:3338 ALSA-2026:3338 — Important: firefox security update 2026-10-02T20:35:14.135438+00:00

Affected: AlmaLinux:8: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* libvpx: Heap buffer overflow in libvpx (CVE-2026-2447) * firefox: Invalid pointer in the JavaScript Engine component (CVE-2026-2785) * firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148 (CVE-2026-2793) * firefox: Undefined behavior in the DOM: Core & HTML component (CVE-2026-2771) * firefox: Integer overflow in the Audio/Video component (CVE-2026-2774) * firefox: Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (CVE-2026-2776) * firefox: Integer overflow in the Libraries component in NSS (CVE-2026-2781) * firefox: Use-after-free in the JavaScript Engine: JIT component (CVE-2026-2766) * firefox: Use-after-free in the Storage: IndexedDB component (CVE-2026-2769) * firefox: Use-after-free in the DOM: Window and Location component (CVE-2026-2787) * firefox: Sandbox escape in the Storage: IndexedDB component (CVE-2026-2768) * firefox: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-2783) * firefox: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-2788) * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-2784) * firefox: Incorrect boundary conditions in the Graphics: ImageLib component (CVE-2026…

 https://cve.radiocsirt.org/vuln/bdu:2026-12119 bdu:2026-12119 2026-10-02T20:35:14.135558+00:00 bdu:2026-12119 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0204 certfr-2026-avi-0204 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-02T20:35:14.135580+00:00 certfr-2026-avi-0204 https://cve.radiocsirt.org/vuln/cnvd-2026-20780 cnvd-2026-20780 2026-10-02T20:35:14.135596+00:00 cnvd-2026-20780 https://cve.radiocsirt.org/vuln/euvd-2026-291759 EUVD-2026-291759 2026-10-02T20:35:14.135608+00:00 EUVD-2026-291759 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2779 fkie_cve-2026-2779 2026-10-02T20:35:14.135619+00:00

Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

 https://cve.radiocsirt.org/vuln/ghsa-94rx-4fcc-c849 GHSA-94rx-4fcc-c849 2026-10-02T20:35:14.135641+00:00

Incorrect boundary conditions in the Networking: JAR component. This vulnerability affects Firefox < 148 and Firefox ESR < 140.8.

 https://cve.radiocsirt.org/vuln/oesa-2026-1471 OESA-2026-1471 — firefox security update 2026-10-02T20:35:14.135656+00:00

Affected: openEuler:22.03-LTS-SP4: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

Heap buffer overflow vulnerability exists in libvpx component. This vulnerability affects Firefox &lt; 147.0.4, Firefox ESR &lt; 140.7.1, and Firefox ESR &lt; 115.32.1.(CVE-2026-2447)

Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability affects Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, and Thunderbird &lt; 140.8.(CVE-2026-2757)

Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, and Thunderbird &lt; 140.8.(CVE-2026-2758)

Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability affects Firefox &lt; 148, Firefox ESR &lt; 115.33, Firefox ESR &lt; 140.8, Thunderbird &lt; 148, and Thunderbird &lt; 140.8.(CVE-2026-2759)

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender compone…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10242-1 openSUSE-SU-2026:10242-1 — firefox-esr-140.8.0-1.1 on GA media 2026-10-02T20:35:14.135718+00:00

firefox-esr-140.8.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:3491 RHSA-2026:3491 — Red Hat Security Advisory: firefox security update 2026-10-02T20:35:14.135758+00:00

libvpx: Heap buffer overflow in libvpx firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component firefox: thunderbird: Use-after-free in the JavaScript: GC component firefox: thunderbird: Incorrect boundary conditions in the Graphics: ImageLib component firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component firefox: thunderbird: Sandbox escape in the Graphics: WebRender component firefox: thunderbird: Integer overflow in the JavaScript: Standard Library component firefox: thunderbird: Use-after-free in the JavaScript Engine component firefox: thunderbird: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component firefox: thunderbird: Use-after-free in the JavaScript Engine component firefox: thunderbird: Use-after-free in the JavaScript Engine: JIT component firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component firefox: thunderbird: Sandbox escape in the Storage: IndexedDB component firefox: thunderbird: Use-after-free in the Storage: IndexedDB component firefox: thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component firefox: thunderbird: Undefined behavior in the DOM: Core & HTML component firefox: thunderbird: Use-after-free in the Audio/Video: Playback component firefox: thunderbird: Incorrect boundary conditions in the Web Audio component firefox: thunderbird: Integer overflow in the Audio/Video component firefox: thunderbird: Mitig…

 https://cve.radiocsirt.org/vuln/suse-su-2026:0812-1 SUSE-SU-2026:0812-1 — Security update for MozillaFirefox 2026-10-02T20:35:14.135834+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-2779 UBUNTU-CVE-2026-2779 2026-10-02T20:35:14.135872+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0497 WID-SEC-W-2026-0497 — Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen 2026-10-02T20:35:14.135906+00:00

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen, einen Denial-of-Service-Zustand herbeizuführen, sensible Informationen offenzulegen, Spoofing-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen oder andere nicht spezifizierte Angriffe durchzuführen.