VDB
CVE-2026-109764
CVE-2026-109764
PUBLISHED
CVSS 5.4 MEDIUM
Reported by mozilla · Published October 13, 2026
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Risk Scores
CVSS 3.1
5.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | 153.5, 158 |
| Mozilla | Thunderbird | 153.5, 158 |
| chainguard | firefox-esr-140 | 0 |
| Mozilla | Firefox | 153.5, 158 |
| Mozilla | Thunderbird | 153.5, 158 |
Timeline
- Oct 13, 2026 Coalition ESS Score
- Oct 13, 2026 CVE Published
- Oct 14, 2026 EPSS Score
- Oct 16, 2026 EPSS Score
- Oct 19, 2026 CVE Updated
- Oct 20, 2026 EPSS Score
- Oct 23, 2026 EPSS Score
- Oct 25, 2026 EPSS Score