https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T08:59:53.036022+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0827 certfr-2026-avi-0827 — De multiples vulnérabilités ont été découvertes dans Mozilla Thunderbird. Elles permettent à un attaquant de provoquer… 2026-10-18T08:59:53.040981+00:00 certfr-2026-avi-0827 https://cve.radiocsirt.org/vuln/euvd-2026-331712 EUVD-2026-331712 2026-10-18T08:59:53.041018+00:00 EUVD-2026-331712 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57963 fkie_cve-2026-57963 2026-10-18T08:59:53.041032+00:00

An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1.

 https://cve.radiocsirt.org/vuln/ghsa-396p-jm6v-v2p3 GHSA-396p-jm6v-v2p3 2026-10-18T08:59:53.041065+00:00

An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1.

 https://cve.radiocsirt.org/vuln/oesa-2026-2936 OESA-2026-2936 — thunderbird security update 2026-10-18T08:59:53.041081+00:00

Affected: openEuler:24.03-LTS-SP3: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es):

A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thunderbird LDAP client until it crashes due to memory exhaustion. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1.(CVE-2026-57962)

An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1.(CVE-2026-57963)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11164-1 openSUSE-SU-2026:11164-1 — MozillaThunderbird-140.12.1-1.1 on GA media 2026-10-18T08:59:53.041108+00:00

MozillaThunderbird-140.12.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-57963 UBUNTU-CVE-2026-57963 2026-10-18T08:59:53.041124+00:00

Affected: Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: thunderbird, Ubuntu:25.10: thunderbird, Ubuntu:26.10: thunderbird, Ubuntu:26.04:LTS: thunderbird

An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2178 WID-SEC-W-2026-2178 — Mozilla Thunderbird: Mehrere Schwachstellen 2026-10-18T08:59:53.041148+00:00

Ein Angreifer kann mehrere Schwachstellen in Mozilla Thunderbird ausnutzen, um einen Denial of Service Angriff durchzuführen, und um falsche Informationen darzustellen.