CVE-2026-109708

CRITICO 9.6CVE-2026-109708 · Published 13/10/2026 · updated 27/10/2026

In breve

CVE-2026-109708 è una vulnerabilità CRITICO (CVSS 9.6).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.33%, superiore al 26.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

References

bugzilla.mozilla.org/show_bug.cgi
mozilla.org/security/advisories/mfsa2026-106
mozilla.org/security/advisories/mfsa2026-108
mozilla.org/security/advisories/mfsa2026-109
mozilla.org/security/advisories/mfsa2026-110
mozilla.org/security/advisories/mfsa2026-119

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free