<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 09:31:47 +0000</lastBuildDate>
    <item>
      <title>CVE-2018-18501</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2018-18501</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Mozilla Thunderbird, Mozilla Firefox ESR, Mozilla Firefox&lt;/p&gt;
&lt;p&gt;Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &amp;lt; 60.5, Firefox ESR &amp;lt; 60.5, and Firefox &amp;lt; 65.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Mozilla Thunderbird, Mozilla Firefox ESR, Mozilla Firefox&lt;/p&gt;
&lt;p&gt;Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird &amp;lt; 60.5, Firefox ESR &amp;lt; 60.5, and Firefox &amp;lt; 65.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2018-18501</guid>
    </item>
    <item>
      <title>USN-3874-1 — firefox vulnerabilities</title>
      <link>https://cve.radiocsirt.org/vuln/usn-3874-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox&lt;/p&gt;
&lt;p&gt;Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, gain additional
privileges by escaping the sandbox, or execute arbitrary code.
(CVE-2018-18500, CVE-2018-18501, CVE-2018-18502, CVE-2018-18503,
CVE-2018-18504, CVE-2018-18505)&lt;/p&gt;
&lt;p&gt;It was discovered that Firefox allowed PAC files to specify that requests
to localhost are sent through the proxy to another server. If proxy
auto-detection is enabled, an attacker could potentially exploit this to
conduct attacks on local services and tools. (CVE-2018-18506)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:14.04:LTS: firefox, Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox&lt;/p&gt;
&lt;p&gt;Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, gain additional
privileges by escaping the sandbox, or execute arbitrary code.
(CVE-2018-18500, CVE-2018-18501, CVE-2018-18502, CVE-2018-18503,
CVE-2018-18504, CVE-2018-18505)&lt;/p&gt;
&lt;p&gt;It was discovered that Firefox allowed PAC files to specify that requests
to localhost are sent through the proxy to another server. If proxy
auto-detection is enabled, an attacker could potentially exploit this to
conduct attacks on local services and tools. (CVE-2018-18506)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/usn-3874-1</guid>
    </item>
  </channel>
</rss>
