https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T01:45:58.307282+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-1529 CVE-2022-1529 2026-10-03T01:45:58.369262+00:00

Affected: Mozilla Firefox ESR, Mozilla Firefox, Mozilla Firefox for Android, Mozilla Thunderbird

An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. This vulnerability affects Firefox ESR < 91.9.1, Firefox < 100.0.2, Firefox for Android < 100.3.0, and Thunderbird < 91.9.1.

 https://vulnerability.circl.lu/vuln/usn-5434-1 USN-5434-1 — firefox vulnerabilities 2026-10-03T01:45:58.369412+00:00

Affected: Ubuntu:18.04:LTS: firefox, Ubuntu:20.04:LTS: firefox

It was discovered that the methods of an Array object could be corrupted as a result of prototype pollution by sending a message to the parent process. If a user were tricked into opening a specially crafted website, an attacker could exploit this to execute JavaScript in a privileged context.