https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T07:58:56.938223+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-1802 CVE-2022-1802 2026-10-10T07:58:56.977887+00:00

Affected: Mozilla Firefox ESR, Mozilla Firefox, Mozilla Firefox for Android, Mozilla Thunderbird

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. This vulnerability affects Firefox ESR < 91.9.1, Firefox < 100.0.2, Firefox for Android < 100.3.0, and Thunderbird < 91.9.1.

 https://cve.radiocsirt.org/vuln/usn-5434-1 USN-5434-1 — firefox vulnerabilities 2026-10-10T07:58:56.977953+00:00

Affected: Ubuntu:18.04:LTS: firefox, Ubuntu:20.04:LTS: firefox

It was discovered that the methods of an Array object could be corrupted as a result of prototype pollution by sending a message to the parent process. If a user were tricked into opening a specially crafted website, an attacker could exploit this to execute JavaScript in a privileged context.