CVE-2026-109708 Security Details

CVE ID

CVE-2026-109708

CWE

N/A

CVE Description

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Published

Oct 15, 2026

CVSS Score & Severity

9.3Critical

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS Score

0.189%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

Bugzilla #2059151PROJECT

GitHub · CVEProject/cvelistV5PROJECT

NVD · CVE-2026-109708PROJECT

mozilla.orgPROJECT

mozilla.orgPROJECT

mozilla.orgPROJECT

mozilla.orgPROJECT