https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:32:11.848052+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:5930 ALSA-2026:5930 — Important: firefox security update 2026-10-02T19:32:11.923871+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Use-after-free in the JavaScript Engine component (CVE-2026-4701) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (CVE-2026-4721) * firefox: thunderbird: Privilege escalation in the Netmonitor component (CVE-2026-4717) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-4688) * firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component (CVE-2026-4706) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-4695) * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component (CVE-2026-4689) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-4698) * firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component (CVE-2026-4716) * firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component (CVE-2026-4684) * firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component (CVE-2026-4705) * firefox: thunderbird: Uninitialized memory in the Graphics: Canvas2D component (CVE-2026-4715) * fi…

 https://cve.radiocsirt.org/vuln/bdu:2026-08475 bdu:2026-08475 2026-10-02T19:32:11.923973+00:00 bdu:2026-08475 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0354 certfr-2026-avi-0354 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-02T19:32:11.923992+00:00 certfr-2026-avi-0354 https://cve.radiocsirt.org/vuln/cnvd-2026-17000 cnvd-2026-17000 2026-10-02T19:32:11.924008+00:00 cnvd-2026-17000 https://cve.radiocsirt.org/vuln/euvd-2026-290583 EUVD-2026-290583 2026-10-02T19:32:11.924020+00:00 EUVD-2026-290583 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4702 fkie_cve-2026-4702 2026-10-02T19:32:11.924030+00:00

JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

 https://cve.radiocsirt.org/vuln/ghsa-mrrg-439g-x65p GHSA-mrrg-439g-x65p 2026-10-02T19:32:11.924052+00:00

JIT miscompilation in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.

 https://cve.radiocsirt.org/vuln/oesa-2026-1705 OESA-2026-1705 — firefox security update 2026-10-02T19:32:11.924067+00:00

Affected: openEuler:24.03-LTS: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es):

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.(CVE-2025-59375)

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox &lt; 149, Firefox ESR &lt; 115.34, and Firefox ESR &lt; 140.9.(CVE-2026-4684)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox &lt; 149, Firefox ESR &lt; 115.34, and Firefox ESR &lt; 140.9.(CVE-2026-4685)

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability affects Firefox &lt; 149, Firefox ESR &lt; 115.34, and Firefox ESR &lt; 140.9.(CVE-2026-4686)

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability affects Firefox &lt; 149, Firefox ESR &lt; 115.34, and Firefox ESR &lt; 140.9.(CVE-2026-4687)

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability affects Firefox &lt; 149 and Firefox ESR &lt; 140.9.(CVE-2026-4688)

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability affects Firefox &lt; 149, Firefox ESR &lt; 115.34, Firefox ESR &lt; 140.9, Thunderbird &lt; 149, and Thunderbird &lt; 140.9.(CVE-2026-4689)

Sandbox escape due to incorrect boundary condi…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10413-1 openSUSE-SU-2026:10413-1 — firefox-esr-140.9.0-1.1 on GA media 2026-10-02T19:32:11.924125+00:00

firefox-esr-140.9.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:7837 RHSA-2026:7837 — Red Hat Security Advisory: firefox security update 2026-10-02T19:32:11.924162+00:00

firefox: thunderbird: Race condition, use-after-free in the Graphics: WebRender component firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component firefox: thunderbird: Incorrect boundary conditions in the Graphics: Canvas2D component firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Telemetry component firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component firefox: thunderbird: Sandbox escape in the Responsive Design Mode component firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics component firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component firefox: thunderbird:…

 https://cve.radiocsirt.org/vuln/suse-su-2026:1127-1 SUSE-SU-2026:1127-1 — Security update for MozillaFirefox 2026-10-02T19:32:11.924239+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4702 UBUNTU-CVE-2026-4702 2026-10-02T19:32:11.924271+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0850 WID-SEC-W-2026-0850 — Mozilla Firefox und Mozilla Thunderbird: Mehrere Schwachstellen 2026-10-02T19:32:11.924303+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, um einen Denial of Service herbeizuführen, um Informationen offenzulegen, um Sicherheitsmechanismen zu umgehen, um den Benutzer zu täuschen und um nicht näher spezifizierte Auswirkungen zu erzielen.