PT-2026-111461 · Mozilla · Firefox+2

·

CVE-2026-109740

·

Published

2026-10-13

·

Updated

2026-10-13

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5
Description An issue exists in the Widget: Win32 component where incorrect boundary conditions allow for a sandbox escape. A sandbox is a security mechanism used to run untrusted code in a restricted environment to prevent it from accessing the rest of the system.
Recommendations Update Firefox to version 158. Update Firefox ESR to version 153.5. Update Thunderbird to version 158. Update Thunderbird to version 153.5.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-109740

Affected Products

Firefox
Firefox Esr
Thunderbird