CVE-2026-109745

Опубликовано: 13 окт. 2026

Источник: nvd

CVSS3: 9.6

EPSS Низкий

Описание

Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Ссылки

EPSS

Процентиль: 29%

0.00349

Низкий

9.6 Critical

CVSS3

Дефекты

CWE-908

Связанные уязвимости

CVE-2026-109745

CVSS3: 9.6

ubuntu

26 дней назад

Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109745

CVSS3: 6.1

redhat

26 дней назад

Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109745

CVSS3: 9.6

debian

26 дней назад

Sandbox escape due to uninitialized memory in the DOM: Web Serial comp ...

GHSA-fhx5-x7g9-94qv

CVSS3: 9.6

github

26 дней назад

Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

RLSA-2026:89756

rocky

8 дней назад

Important: firefox security, bug fix, and enhancement update

EPSS

Процентиль: 29%

0.00349

Низкий

9.6 Critical

CVSS3

Дефекты

CWE-908