https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:53:42.400454+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-03530 bdu:2025-03530 2026-10-06T23:53:42.407735+00:00 bdu:2025-03530 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0251 certfr-2025-avi-0251 — Une vulnérabilité a été découverte dans Mozilla Firefox. Elle permet à un attaquant de provoquer un contournement de la… 2026-10-06T23:53:42.407767+00:00 certfr-2025-avi-0251 https://cve.radiocsirt.org/vuln/euvd-2026-325949 EUVD-2026-325949 2026-10-06T23:53:42.407784+00:00 EUVD-2026-325949 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2857 fkie_cve-2025-2857 2026-10-06T23:53:42.407796+00:00

Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 136.0.4, Firefox ESR 128.8.1, and Firefox ESR 115.21.1.

 https://cve.radiocsirt.org/vuln/ghsa-h8g5-2596-xjh9 GHSA-h8g5-2596-xjh9 2026-10-06T23:53:42.407824+00:00

Following the sandbox escape in CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. Attackers were able to confuse the parent process into leaking handles to unprivileged child processes leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 136.0.4, Firefox ESR < 128.8.1, and Firefox ESR < 115.21.1.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14948-1 openSUSE-SU-2025:14948-1 — MozillaFirefox-136.0.4-1.1 on GA media 2026-10-06T23:53:42.407842+00:00

MozillaFirefox-136.0.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0651 WID-SEC-W-2025-0651 — Mozilla Firefox und Firefox ESR: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-06T23:53:42.407858+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um Sicherheitsvorkehrungen zu umgehen.