https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:29:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-02675 bdu:2023-02675 https://cve.radiocsirt.org/vuln/bdu:2023-02675 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0303 certfr-2023-avi-0303 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0303 https://cve.radiocsirt.org/vuln/euvd-2026-206765 EUVD-2026-206765 https://cve.radiocsirt.org/vuln/euvd-2026-206765 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29532 <p>A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server.</p> <p>*Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox &lt; 112, Firefox ESR &lt; 102.10, and Thunderbird &lt; 102.10.</p> <p>A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server.</p> <p>*Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox &lt; 112, Firefox ESR &lt; 102.10, and Thunderbird &lt; 102.10.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-29532 https://cve.radiocsirt.org/vuln/ghsa-f2q9-pfpx-m83g <p>A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server.</p> <p>*Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox &lt; 112, Firefox ESR &lt; 102.10, and Thunderbird &lt; 102.10.</p> <p>A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server.</p> <p>*Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox &lt; 112, Firefox ESR &lt; 102.10, and Thunderbird &lt; 102.10.</p> https://cve.radiocsirt.org/vuln/ghsa-f2q9-pfpx-m83g https://cve.radiocsirt.org/vuln/gsd-2023-29532 gsd-2023-29532 https://cve.radiocsirt.org/vuln/gsd-2023-29532 https://cve.radiocsirt.org/vuln/oesa-2024-1746 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: mozjs78</p> <p>SpiderMonkey is the code-name for Mozilla Firefox&amp;apos;s C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript. Security Fix(es): Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR &amp;lt; 91.5, Firefox &amp;lt; 96, and Thunderbird &amp;lt; 91.5.(CVE-2022-22740) A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox &amp;lt; 112, Firefox ESR &amp;lt; 102.10, and Thunderbird &amp;lt; 102.10. (CVE-2023-29532)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: mozjs78</p> <p>SpiderMonkey is the code-name for Mozilla Firefox&amp;apos;s C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript. Security Fix(es): Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR &amp;lt; 91.5, Firefox &amp;lt; 96, and Thunderbird &amp;lt; 91.5.(CVE-2022-22740) A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox &amp;lt; 112, Firefox ESR &amp;lt; 102.10, and Thunderbird &amp;lt; 102.10. (CVE-2023-29532)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1746 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12852-1 <p>MozillaThunderbird-102.10.0-1.1 on GA media</p> <p>MozillaThunderbird-102.10.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12852-1 https://cve.radiocsirt.org/vuln/suse-su-2023:1817-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/suse-su-2023:1817-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-29532 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91</p> <p>A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox &lt; 112, Firefox ESR &lt; 102.10, and Thunderbird &lt; 102.10.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91</p> <p>A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox &lt; 112, Firefox ESR &lt; 102.10, and Thunderbird &lt; 102.10.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-29532 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0941 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, um Informationen offenzulegen und um Sicherheitsmechanismen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, um Informationen offenzulegen und um Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0941