https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:17:40.197388+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-00866 bdu:2018-00866 2026-10-03T23:17:40.378258+00:00 bdu:2018-00866 https://cve.radiocsirt.org/vuln/certfr-2018-avi-052 certfr-2018-avi-052 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant… 2026-10-03T23:17:40.378305+00:00 certfr-2018-avi-052 https://cve.radiocsirt.org/vuln/cnvd-2018-02234 cnvd-2018-02234 2026-10-03T23:17:40.378325+00:00 cnvd-2018-02234 https://cve.radiocsirt.org/vuln/euvd-2026-62058 EUVD-2026-62058 2026-10-03T23:17:40.378338+00:00 EUVD-2026-62058 https://cve.radiocsirt.org/vuln/fkie_cve-2018-5116 fkie_cve-2018-5116 2026-10-03T23:17:40.378349+00:00

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with this permission. This vulnerability affects Firefox < 58.

 https://cve.radiocsirt.org/vuln/ghsa-3h65-3mjq-qqj8 GHSA-3h65-3mjq-qqj8 2026-10-03T23:17:40.378380+00:00

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with this permission. This vulnerability affects Firefox < 58.

 https://cve.radiocsirt.org/vuln/gsd-2018-5116 gsd-2018-5116 2026-10-03T23:17:40.378397+00:00 gsd-2018-5116 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10600-1 openSUSE-SU-2024:10600-1 — MozillaFirefox-92.0-1.2 on GA media 2026-10-03T23:17:40.378407+00:00

MozillaFirefox-92.0-1.2 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-5116 UBUNTU-CVE-2018-5116 2026-10-03T23:17:40.378831+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with this permission. This vulnerability affects Firefox < 58.