https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:33:14 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:47101 <p><strong>Affected:</strong> AlmaLinux:10: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718) * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350) * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391) * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412) * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-…</p> <p><strong>Affected:</strong> AlmaLinux:10: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718) * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350) * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391) * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412) * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-…</p> https://cve.radiocsirt.org/vuln/alsa-2026:47101 https://cve.radiocsirt.org/vuln/bdu:2026-10081 bdu:2026-10081 https://cve.radiocsirt.org/vuln/bdu:2026-10081 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0887 certfr-2026-avi-0887 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0887 https://cve.radiocsirt.org/vuln/euvd-2026-339716 EUVD-2026-339716 https://cve.radiocsirt.org/vuln/euvd-2026-339716 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15719 <p>We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.</p> <p>We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-15719 https://cve.radiocsirt.org/vuln/ghsa-hqh9-m4jx-3x67 <p>We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6.</p> <p>We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6.</p> https://cve.radiocsirt.org/vuln/ghsa-hqh9-m4jx-3x67 https://cve.radiocsirt.org/vuln/ncsc-2026-0242 NCSC-2026-0242 https://cve.radiocsirt.org/vuln/ncsc-2026-0242 https://cve.radiocsirt.org/vuln/oesa-2026-3195 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: thunderbird</p> <p>Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es):</p> <p>The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13.(CVE-2026-14899)</p> <p>We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13.(CVE-2026-15718)</p> <p>We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.(CVE-2026-15719)</p> <p>Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16349)</p> <p>Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16350)</p> <p>Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbi…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: thunderbird</p> <p>Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es):</p> <p>The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13.(CVE-2026-14899)</p> <p>We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13.(CVE-2026-15718)</p> <p>We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.(CVE-2026-15719)</p> <p>Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16349)</p> <p>Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.(CVE-2026-16350)</p> <p>Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbi…</p> https://cve.radiocsirt.org/vuln/oesa-2026-3195 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11311-1 <p>MozillaFirefox-152.0.6-1.1 on GA media</p> <p>MozillaFirefox-152.0.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11311-1 https://cve.radiocsirt.org/vuln/rhsa-2026:53444 <p>thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component firefox: thunderbird: Site isolation issue in the DOM: Navigation component firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component firefox: thunderbird: Information disclosure in the Graphics: ImageLib component firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component firefox: thunderbird: Incorrect boundary conditions in the Graphics component firefox: thunderbird: Site isolation issue in the Graphics: WebRender component firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component firefox: thunderbird: JIT miscompilation in the Ja…</p> <p>thunderbird: Off-by-one out of bounds read in MIME header parser for forwarding firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component firefox: thunderbird: Site isolation issue in the DOM: Navigation component firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component firefox: thunderbird: Information disclosure in the Graphics: ImageLib component firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component firefox: thunderbird: Incorrect boundary conditions in the Graphics component firefox: thunderbird: Site isolation issue in the Graphics: WebRender component firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component firefox: thunderbird: JIT miscompilation in the Ja…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:53444 https://cve.radiocsirt.org/vuln/rlsa-2026:47101 <p><strong>Affected:</strong> Rocky Linux:10: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)</p> <p>* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)</p> <p>* firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)</p> <p>* firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)</p> <p>* firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)</p> <p>* firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)</p> <p>* firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)</p> <p>* firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)</p> <p>* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)</p> <p>* firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)</p> <p>* firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)</p> <p>* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)</p> <p>* firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)</p> <p>* firefox:…</p> <p><strong>Affected:</strong> Rocky Linux:10: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)</p> <p>* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)</p> <p>* firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)</p> <p>* firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)</p> <p>* firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)</p> <p>* firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)</p> <p>* firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)</p> <p>* firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)</p> <p>* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)</p> <p>* firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)</p> <p>* firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)</p> <p>* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)</p> <p>* firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)</p> <p>* firefox:…</p> https://cve.radiocsirt.org/vuln/rlsa-2026:47101 https://cve.radiocsirt.org/vuln/suse-su-2026:23115-1 <p>Security update for MozillaFirefox</p> <p>Security update for MozillaFirefox</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23115-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-15719 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115</p> <p>We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115</p> <p>We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-15719 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2340 <p>Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2340