PT-2026-111492 · Mozilla · Firefox+1

·

CVE-2026-109772

·

Published

2026-10-13

·

Updated

2026-10-13

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158
Description A same-origin policy bypass exists in the DevTools component. The same-origin policy is a critical security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin.
Recommendations Update Firefox to version 158 or later. Update Thunderbird to version 158 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-109772

Affected Products

Firefox
Thunderbird