https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T21:40:52.500716+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-5732 CVE-2023-5732 — Address bar spoofing via bidirectional characters 2026-10-14T21:40:52.502720+00:00

Affected: Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird

An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affects Firefox < 117, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

 https://cve.radiocsirt.org/vuln/usn-6468-1 USN-6468-1 — thunderbird vulnerabilities 2026-10-14T21:40:52.502778+00:00

Affected: Ubuntu:20.04:LTS: thunderbird, Ubuntu:22.04:LTS: thunderbird

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code. (CVE-2023-5724, CVE-2023-5728, CVE-2023-5730, CVE-2023-5732)

Kelsey Gilbert discovered that Thunderbird did not properly manage certain browser prompts and dialogs due to an insufficient activation-delay. An attacker could potentially exploit this issue to perform clickjacking. (CVE-2023-5721)

Shaheen Fazim discovered that Thunderbird did not properly validate the URLs open by installed WebExtension. An attacker could potentially exploit this issue to obtain sensitive information. (CVE-2023-5725)