https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:21:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-04499 bdu:2023-04499 https://cve.radiocsirt.org/vuln/bdu:2023-04499 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0611 certfr-2023-avi-0611 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0611 https://cve.radiocsirt.org/vuln/cnvd-2023-61754 cnvd-2023-61754 https://cve.radiocsirt.org/vuln/cnvd-2023-61754 https://cve.radiocsirt.org/vuln/euvd-2026-196734 EUVD-2026-196734 https://cve.radiocsirt.org/vuln/euvd-2026-196734 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4052 <p>The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox &lt; 116, Firefox ESR &lt; 115.1, and Thunderbird &lt; 115.1.</p> <p>The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox &lt; 116, Firefox ESR &lt; 115.1, and Thunderbird &lt; 115.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4052 https://cve.radiocsirt.org/vuln/ghsa-gjqm-928w-fr7f <p>The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox &lt; 116 and Firefox ESR &lt; 115.1.</p> <p>The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox &lt; 116 and Firefox ESR &lt; 115.1.</p> https://cve.radiocsirt.org/vuln/ghsa-gjqm-928w-fr7f https://cve.radiocsirt.org/vuln/gsd-2023-4052 gsd-2023-4052 https://cve.radiocsirt.org/vuln/gsd-2023-4052 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13124-1 <p>MozillaFirefox-116.0.2-1.1 on GA media</p> <p>MozillaFirefox-116.0.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13124-1 https://cve.radiocsirt.org/vuln/suse-su-2023:3161-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/suse-su-2023:3161-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4052 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:24.04:LTS: mozjs102</p> <p>The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox &lt; 116, Firefox ESR &lt; 115.1, and Thunderbird &lt; 115.1.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:24.04:LTS: mozjs102</p> <p>The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox &lt; 116, Firefox ESR &lt; 115.1, and Thunderbird &lt; 115.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4052 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1934 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, seine Privilegien zu erweitern, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, seine Privilegien zu erweitern, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1934