https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T22:43:03.566661+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-1097 CVE-2022-1097 2026-10-03T22:43:03.573089+00:00

Affected: Mozilla Thunderbird, Mozilla Firefox, Mozilla Firefox ESR

<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

 https://vulnerability.circl.lu/vuln/usn-5370-1 USN-5370-1 — firefox vulnerabilities 2026-10-03T22:43:03.573258+00:00

Affected: Ubuntu:18.04:LTS: firefox, Ubuntu:20.04:LTS: firefox

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, execute script unexpectedly, obtain sensitive information, conduct spoofing attacks, or execute arbitrary code. (CVE-2022-1097, CVE-2022-24713, CVE-2022-28281, CVE-2022-28282, CVE-2022-28284, CVE-2022-28285, CVE-2022-28286, CVE-2022-28288, CVE-2022-28289)

A security issue was discovered with the sourceMapURL feature of devtools. An attacker could potentially exploit this to include local files that should have been inaccessible. (CVE-2022-28283)

It was discovered that selecting text caused Firefox to crash in some circumstances. An attacker could potentially exploit this to cause a denial of service. (CVE-2022-28287)