https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T15:15:40.064652+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-43536 CVE-2021-43536 2026-10-01T15:15:40.588320+00:00

Affected: Mozilla Thunderbird, Mozilla Firefox ESR, Mozilla Firefox

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

 https://vulnerability.circl.lu/vuln/usn-5186-1 USN-5186-1 — firefox vulnerabilities 2026-10-01T15:15:40.588435+00:00

Affected: Ubuntu:18.04:LTS: firefox, Ubuntu:20.04:LTS: firefox

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, conduct spoofing attacks, bypass CSP restrictions, or execute arbitrary code. (CVE-2021-43536, CVE-2021-43537, CVE-2021-43538, CVE-2021-43539, CVE-2021-43541, CVE-2021-43542, CVE-2021-43543, CVE-2021-43545, CVE-2021-43546)

A security issue was discovered with the handling of WebExtension permissions. If a user were tricked into installing a specially crafted extension, an attacker could potentially exploit this to create and install a service worker that wouldn't be uninstalled with the extension. (CVE-2021-43540)