https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:50:54 +0000 https://cve.radiocsirt.org/vuln/cve-2017-7764 <p><strong>Affected:</strong> Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird</p> <p>Characters from the &#34;Canadian Syllabics&#34; unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw &#34;punycode&#34; form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from &#34;Aspirational Use Scripts&#34; such as Canadian Syllabics to be mixed with Latin characters in the &#34;moderately restrictive&#34; IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as &#34;Limited Use Scripts.&#34;. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.</p> <p><strong>Affected:</strong> Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird</p> <p>Characters from the &#34;Canadian Syllabics&#34; unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw &#34;punycode&#34; form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from &#34;Aspirational Use Scripts&#34; such as Canadian Syllabics to be mixed with Latin characters in the &#34;moderately restrictive&#34; IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as &#34;Limited Use Scripts.&#34;. This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 52.2, and Thunderbird &lt; 52.2.</p> https://cve.radiocsirt.org/vuln/cve-2017-7764