PT-2026-111485

CVE-2026-109765

·

Published

2026-10-13

·

Updated

2026-10-22

Description by

CVSS 3.1
4.2
Medium
MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5
Description A race condition leading to a use-after-free issue exists within the Graphics: Text component. A race condition occurs when the timing or order of events affects the correctness of the software, while use-after-free happens when a program continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.
Recommendations Update Firefox to version 158. Update Firefox ESR to version 153.5. Update Thunderbird to version 158. Update Thunderbird to version 153.5.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2026:12116-1
OPENSUSE-SU-2026:12190-1
OPENSUSE-SU-2026:12224-1
OPENSUSE-SU-2026:22139-1
SUSE-SU-2026:24260-1
SUSE-SU-2026:4736-1
SUSE-SU-2026:4806-1
SUSE-SU-2026:4834-1
Found an issue in the description? Have something to add? Feel free to write us 👾