https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T17:36:31.849284+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/alsa-2026:69461 ALSA-2026:69461 — Important: firefox security update 2026-10-08T17:36:31.927874+00:00

Affected: AlmaLinux:10: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024) * firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019) * firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026) * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031) * firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011) * firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027) * firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028) * firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015) * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013) * firefox: thunderbird: Use-after-free in the Disab…

 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1183 certfr-2026-avi-1183 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Certaines d'entre elles permettent à un atta… 2026-10-08T17:36:31.928069+00:00 certfr-2026-avi-1183 https://vulnerability.circl.lu/vuln/fkie_cve-2026-92015 fkie_cve-2026-92015 2026-10-08T17:36:31.928112+00:00

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

 https://vulnerability.circl.lu/vuln/ghsa-7j9r-93j5-qmvf GHSA-7j9r-93j5-qmvf 2026-10-08T17:36:31.928158+00:00

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.

 https://vulnerability.circl.lu/vuln/oesa-2026-4120 OESA-2026-4120 — firefox security update 2026-10-08T17:36:31.928186+00:00

Affected: openEuler:22.03-LTS-SP4: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fix(es):

Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92005)

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92006)

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92007)

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92008)

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.(CVE-2026-92009)

Privilege escalation due to inco…

 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11796-1 openSUSE-SU-2026:11796-1 — firefox-esr-153.3.0-1.1 on GA media 2026-10-08T17:36:31.928301+00:00

firefox-esr-153.3.0-1.1 on GA media

 https://vulnerability.circl.lu/vuln/rlsa-2026:69461 RLSA-2026:69461 — Important: firefox security update 2026-10-08T17:36:31.928564+00:00

Affected: Rocky Linux:10: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)

* firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)

* firefox: thunderbird: Use-after-free in the Networking component (CVE-2026-92026)

* firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-92031)

* firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component (CVE-2026-92032)

* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92010)

* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92006)

* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92011)

* firefox: thunderbird: Use-after-free in the DOM: Streams component (CVE-2026-92027)

* firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-92028)

* firefox: thunderbird: Privilege escalation in the WebExtensions component (CVE-2026-92015)

* firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2026-92013)

* firefox: thunderbird: Use-after-free in the Disability Access APIs…

 https://vulnerability.circl.lu/vuln/suse-su-2026:23918-1 SUSE-SU-2026:23918-1 — Security update for MozillaFirefox 2026-10-08T17:36:31.928685+00:00

Security update for MozillaFirefox

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-92015 UBUNTU-CVE-2026-92015 2026-10-08T17:36:31.928831+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird, Ubuntu:24.04:LTS: mozjs102, Ubuntu:24.04:LTS: mozjs115

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.