VDB
CVE-2026-109751
CVE-2026-109751
PUBLISHED
CVSS 4.3 MEDIUM
Reported by mozilla · Published October 13, 2026
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Risk Scores
CVSS 3.1
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | 153.5, 158 |
| Mozilla | Thunderbird | 153.5, 158 |
| Mozilla | Thunderbird | 153.5, 158 |
| Mozilla | Firefox | 153.5, 158 |
| chainguard | firefox-esr-140 | 0 |
Timeline
- Oct 13, 2026 Coalition ESS Score
- Oct 13, 2026 CVE Published
- Oct 13, 2026 CVE Updated
- Oct 14, 2026 EPSS Score
- Oct 19, 2026 EPSS Score
- Oct 21, 2026 EPSS Score
- Oct 25, 2026 EPSS Score
- Oct 29, 2026 EPSS Score
- Nov 1, 2026 Distribution Patch
- Nov 1, 2026 Distribution Patch
- Nov 1, 2026 Security Advisory