PT-2026-102579

CVE-2026-100805

Published

2026-09-29

Updated

2026-10-10

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 157 Firefox versions prior to 157

Description A race condition leads to a use-after-free issue within the Audio/Video component. A race condition occurs when the timing or order of events affects the correctness of the software, while use-after-free happens when a program continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.

Recommendations Update Thunderbird to version 157. Update Firefox to version 157.

Exploitability

Fix

Impacts

Researchers

Hyeonjun Ahn

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')

Related identifiers