https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:59:47.964245+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-138 certfr-2020-avi-138 — De multiples vulnérabilités ont été découvertes dans Mozilla Firefox. Elles permettent à un attaquant de provoquer une… 2026-10-06T18:59:48.288151+00:00 certfr-2020-avi-138 https://cve.radiocsirt.org/vuln/cnvd-2020-18416 cnvd-2020-18416 2026-10-06T18:59:48.288226+00:00 cnvd-2020-18416 https://cve.radiocsirt.org/vuln/euvd-2026-37540 EUVD-2026-37540 2026-10-06T18:59:48.288244+00:00 EUVD-2026-37540 https://cve.radiocsirt.org/vuln/fkie_cve-2020-6812 fkie_cve-2020-6812 2026-10-06T18:59:48.288256+00:00

The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's AirPods.) Websites with camera or microphone permission are able to enumerate device names, disclosing the user's name. To resolve this issue, Firefox added a special case that renames devices containing the substring 'AirPods' to simply 'AirPods'. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.

 https://cve.radiocsirt.org/vuln/ghsa-vh23-x25h-2wfm GHSA-vh23-x25h-2wfm 2026-10-06T18:59:48.288290+00:00

The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's AirPods.) Websites with camera or microphone permission are able to enumerate device names, disclosing the user's name. To resolve this issue, Firefox added a special case that renames devices containing the substring 'AirPods' to simply 'AirPods'. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.

 https://cve.radiocsirt.org/vuln/gsd-2020-6812 gsd-2020-6812 2026-10-06T18:59:48.288310+00:00 gsd-2020-6812 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0340-1 openSUSE-SU-2020:0340-1 — Security update for MozillaFirefox 2026-10-06T18:59:48.288320+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/rhsa-2020:0816 RHSA-2020:0816 — Red Hat Security Advisory: firefox security update 2026-10-06T18:59:48.288341+00:00

usrsctp: Out of bounds reads in sctp_load_addresses_from_init() Mozilla: Use-after-free when removing data about origins Mozilla: BodyStream:: OnInputStreamReady was missing protections against state confusion Mozilla: Use-after-free in cubeb during stream destruction Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6

 https://cve.radiocsirt.org/vuln/suse-su-2020:0686-1 SUSE-SU-2020:0686-1 — Security update for MozillaFirefox 2026-10-06T18:59:48.288367+00:00

Security update for MozillaFirefox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-6812 UBUNTU-CVE-2020-6812 2026-10-06T18:59:48.288386+00:00

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: firefox, Ubuntu:18.04:LTS: thunderbird, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs52

The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's AirPods.) Websites with camera or microphone permission are able to enumerate device names, disclosing the user's name. To resolve this issue, Firefox added a special case that renames devices containing the substring 'AirPods' to simply 'AirPods'. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.