Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-109705

Опубликовано: 13 окт. 2026
Источник: debian
EPSS Низкий

Описание

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed158.0-1package
firefox-esrfixed153.5.0esr-1package
thunderbirdfixed1:153.5.0esr-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109705

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109705

  • https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109705

EPSS

Процентиль: 26%
0.00325
Низкий

Связанные уязвимости

CVSS3: 9.6
ubuntu
27 дней назад

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

CVSS3: 7.5
redhat
27 дней назад

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVSS3: 9.6
nvd
27 дней назад

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

CVSS3: 9.6
github
27 дней назад

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

rocky
9 дней назад

Important: firefox security, bug fix, and enhancement update

EPSS

Процентиль: 26%
0.00325
Низкий