CVE-2026-109705

CRITICO 9.6CVE-2026-109705 · Published 13/10/2026 · updated 27/10/2026

In breve

CVE-2026-109705 è una vulnerabilità CRITICO (CVSS 9.6).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.33%, superiore al 25.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

References

bugzilla.mozilla.org/show_bug.cgi
mozilla.org/security/advisories/mfsa2026-106
mozilla.org/security/advisories/mfsa2026-108
mozilla.org/security/advisories/mfsa2026-109
mozilla.org/security/advisories/mfsa2026-110
mozilla.org/security/advisories/mfsa2026-119

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free