https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:46:40.309713+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-26485 CVE-2022-26485 2026-09-28T19:46:40.337588+00:00

Affected: Mozilla Firefox, Mozilla Firefox ESR, Mozilla Firefox for Android, Mozilla Thunderbird, Mozilla Focus

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.

 https://vulnerability.circl.lu/vuln/usn-5314-1 USN-5314-1 — firefox vulnerabilities 2026-09-28T19:46:40.337791+00:00

Affected: Ubuntu:18.04:LTS: firefox, Ubuntu:20.04:LTS: firefox

A use-after-free was discovered when removing an XSLT parameter in some circumstances. If a user were tricked into opening a specially crafted website, an attacker could exploit this to cause a denial of service, or execute arbitrary code. (CVE-2022-26485)

A use-after-free was discovered in the WebGPU IPC framework. If a user were tricked into opening a specially crafted website, an attacker could exploit this to cause a denial of service, or execute arbitrary code. (CVE-2022-26486)