https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T19:53:58.043327+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-11712 CVE-2025-11712 — An OBJECT tag type attribute overrode browser behavior on web resources without a content-type 2026-10-05T19:53:58.058056+00:00

Affected: Mozilla Firefox, Mozilla Thunderbird

A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.