https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T17:46:03.097225+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-4089 CVE-2025-4089 — Potential local code execution in "copy as cURL" command 2026-10-07T17:46:03.128145+00:00

Affected: Mozilla Firefox, Mozilla Thunderbird

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

 https://vulnerability.circl.lu/vuln/usn-7991-1 USN-7991-1 — thunderbird vulnerabilities 2026-10-07T17:46:03.128248+00:00

Affected: Ubuntu:22.04:LTS: thunderbird

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code.