https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:02:22.432050+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:21378 ALSA-2026:21378 — Important: firefox security update 2026-10-03T15:02:22.511470+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-8388) * firefox: Other issue in the JavaScript Engine component (CVE-2026-8391) * firefox: Sandbox escape in the Profile Backup component (CVE-2026-8401) * firefox: Integer overflow in the Networking: JAR component (CVE-2026-8956) * firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151 (CVE-2026-8975) * firefox: Privilege escalation in the DOM: Workers component (CVE-2026-8955) * firefox: Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component (CVE-2026-8968) * firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component (CVE-2026-8954) * firefox: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-8958) * firefox: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-8946) * firefox: Privilege escalation in the Security component (CVE-2026-8970) * firefox: Same-origin policy bypass in the Networking: HTTP component (CVE-2026-8950) * firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151 (CVE-2026-8974) * firefox: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-8953) * firefox: Spoofing issue in the Form Autofil…

 https://cve.radiocsirt.org/vuln/bdu:2026-12885 bdu:2026-12885 2026-10-03T15:02:22.511586+00:00 bdu:2026-12885 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0615 certfr-2026-avi-0615 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-03T15:02:22.511606+00:00 certfr-2026-avi-0615 https://cve.radiocsirt.org/vuln/euvd-2026-339717 EUVD-2026-339717 2026-10-03T15:02:22.511623+00:00 EUVD-2026-339717 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8953 fkie_cve-2026-8953 2026-10-03T15:02:22.511634+00:00

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

 https://cve.radiocsirt.org/vuln/ghsa-c3qv-mh67-fpxw GHSA-c3qv-mh67-fpxw 2026-10-03T15:02:22.511657+00:00

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, and Firefox ESR 140.11.

 https://cve.radiocsirt.org/vuln/oesa-2026-2392 OESA-2026-2392 — firefox security update 2026-10-03T15:02:22.511672+00:00

Affected: openEuler:24.03-LTS-SP3: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

A critical vulnerability has been discovered in Mozilla Firefox browser versions up to 150.0.2, classified as CWE-119 buffer error. The vulnerability allows the product to read from or write to memory locations outside the intended boundary of the buffer when performing operations on a memory buffer. This vulnerability affects confidentiality, integrity, and availability. Upgrading to version 150.0.3 eliminates this vulnerability.(CVE-2026-8388)

A vulnerability was found in Mozilla Firefox up to 150.0.2 (Web Browser). It has been declared as critical. As an impact it is known to affect confidentiality, integrity, and availability. Upgrading to version 150.0.3 eliminates this vulnerability.(CVE-2026-8391)

A sandbox escape vulnerability exists in the Profile Backup component of Mozilla Firefox. This vulnerability affects Firefox versions up to 150.0.2 and was fixed in version 150.0.3. An attacker could potentially exploi…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10813-1 openSUSE-SU-2026:10813-1 — firefox-esr-140.11.0-1.1 on GA media 2026-10-03T15:02:22.511724+00:00

firefox-esr-140.11.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:26174 RHSA-2026:26174 — Red Hat Security Advisory: thunderbird security update 2026-10-03T15:02:22.511756+00:00

firefox: thunderbird: Use-after-free in the DOM: Networking component firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2 firefox: thunderbird: Other issue in the WebRTC component firefox: thunderbird: Incorrect boundary conditions in the JavaScript Engine: JIT component firefox: thunderbird: Other issue in the JavaScript Engine component firefox: thunderbird: Sandbox escape in the Profile Backup component firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Web Codecs component firefox: thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component firefox: Same-origin policy bypass in the Networking: HTTP component firefox: Sandbox escape due to use-after-free in the Disability Access APIs component firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component firefox: thunderbird: Privilege escalation in the DOM: Workers component firefox: Integer overflow in the Networking: JAR component firefox: Privilege escalation in the Enterprise Policies component firefox: Information disclosure, sandbox escape in the Security: Process Sandboxing component firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component firefox: Spoofing issue in the Form Autofill component firefox: Mitigation bypass in the DOM: Security component firefox: Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component firefox: Privilege escalatio…

 https://cve.radiocsirt.org/vuln/rlsa-2026:21378 RLSA-2026:21378 — Important: firefox security update 2026-10-03T15:02:22.511812+00:00

Affected: Rocky Linux:9: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component (CVE-2026-8388)

* firefox: Other issue in the JavaScript Engine component (CVE-2026-8391)

* firefox: Sandbox escape in the Profile Backup component (CVE-2026-8401)

* firefox: Integer overflow in the Networking: JAR component (CVE-2026-8956)

* firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151 (CVE-2026-8975)

* firefox: Privilege escalation in the DOM: Workers component (CVE-2026-8955)

* firefox: Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component (CVE-2026-8968)

* firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component (CVE-2026-8954)

* firefox: Information disclosure, sandbox escape in the Security: Process Sandboxing component (CVE-2026-8958)

* firefox: Incorrect boundary conditions in the Audio/Video: Web Codecs component (CVE-2026-8946)

* firefox: Privilege escalation in the Security component (CVE-2026-8970)

* firefox: Same-origin policy bypass in the Networking: HTTP component (CVE-2026-8950)

* firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151 (CVE-2026-8974)

* firefox: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-8953)

* firefox: Spoofing issue in the Form Autofill component (CVE-202…

 https://cve.radiocsirt.org/vuln/suse-su-2026:2039-1 SUSE-SU-2026:2039-1 — Security update for MozillaFirefox 2026-10-03T15:02:22.511855+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8953 UBUNTU-CVE-2026-8953 2026-10-03T15:02:22.511897+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1606 WID-SEC-W-2026-1606 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-03T15:02:22.511932+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, um Informationen offenzulegen, Sicherheitsbeschränkungen zu umgehen (z. B. Sandbox-Escape), den Benutzer zu täuschen, Berechtigungen zu eskalieren oder einen Denial-of-Service-Zustand herbeizuführen.