https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:39:45.008036+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-01148 bdu:2016-01148 2026-10-03T09:39:45.197279+00:00 bdu:2016-01148 https://cve.radiocsirt.org/vuln/certfr-2016-avi-146 certfr-2016-avi-146 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Mozilla Firefox</span>. Certaines d'entre elles… 2026-10-03T09:39:45.197322+00:00 certfr-2016-avi-146 https://cve.radiocsirt.org/vuln/cnvd-2016-02671 cnvd-2016-02671 2026-10-03T09:39:45.197348+00:00 cnvd-2016-02671 https://cve.radiocsirt.org/vuln/euvd-2026-83203 EUVD-2026-83203 2026-10-03T09:39:45.197371+00:00 EUVD-2026-83203 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2817 fkie_cve-2016-2817 2026-10-03T09:39:45.197390+00:00

The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.

 https://cve.radiocsirt.org/vuln/ghsa-px89-65ch-24x4 GHSA-px89-65ch-24x4 2026-10-03T09:39:45.197444+00:00

The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.

 https://cve.radiocsirt.org/vuln/gsd-2016-2817 gsd-2016-2817 2026-10-03T09:39:45.197463+00:00 gsd-2016-2817 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media 2026-10-03T09:39:45.197475+00:00

MozillaFirefox-50.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2817 UBUNTU-CVE-2016-2817 2026-10-03T09:39:45.198013+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox

The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.