https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:20:28.124202+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:69461 ALSA-2026:69461 — Important: firefox security update 2026-10-02T23:20:28.588643+00:00

Affected: AlmaLinux:10: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024) * firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019) * firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031) * firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011) * firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028) * firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013) * firefox: thunderbird: Use-after-free in the Disab…

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1183 certfr-2026-avi-1183 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-02T23:20:28.588728+00:00 certfr-2026-avi-1183 https://cve.radiocsirt.org/vuln/euvd-2026-372645 EUVD-2026-372645 2026-10-02T23:20:28.588750+00:00 EUVD-2026-372645 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92028 fkie_cve-2026-92028 2026-10-02T23:20:28.588771+00:00

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

 https://cve.radiocsirt.org/vuln/ghsa-qm5r-cp4c-rchw GHSA-qm5r-cp4c-rchw 2026-10-02T23:20:28.588825+00:00

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.

 https://cve.radiocsirt.org/vuln/oesa-2026-4120 OESA-2026-4120 — firefox security update 2026-10-02T23:20:28.588840+00:00

Affected: openEuler:22.03-LTS-SP4: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es):

Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92005)

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92006)

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92007)

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92008)

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92009)

Privilege escalation due to inco…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11796-1 openSUSE-SU-2026:11796-1 — firefox-esr-153.3.0-1.1 on GA media 2026-10-02T23:20:28.588893+00:00

firefox-esr-153.3.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rlsa-2026:69461 RLSA-2026:69461 — Important: firefox security update 2026-10-02T23:20:28.588946+00:00

Affected: Rocky Linux:10: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)

* firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)

* firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)

* firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)

* firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)

* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)

* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)

* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)

* firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)

* firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)

* firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)

* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)

* firefox: thunderbird: Use-after-free in the Disability Access APIs…

 https://cve.radiocsirt.org/vuln/suse-su-2026:23918-1 SUSE-SU-2026:23918-1 — Security update for MozillaFirefox 2026-10-02T23:20:28.588991+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-92028 UBUNTU-CVE-2026-92028 2026-10-02T23:20:28.589039+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3375 WID-SEC-W-2026-3375 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen 2026-10-02T23:20:28.589071+00:00

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Firefox ESR und Thunderbird ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, den Speicher zu beschädigen, Denial-of-Service-Zustände zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.