https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T06:45:58.364190+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2026-09018 bdu:2026-09018 2026-09-29T06:45:58.409166+00:00 bdu:2026-09018 https://vulnerability.circl.lu/vuln/cve-2024-4367 CVE-2024-4367 2026-09-29T06:45:58.409244+00:00

Affected: Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird, mozilla firefox_esr, Siemens Teamcenter V2312, Siemens Teamcenter V2406, Siemens Teamcenter V2512

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.