PT-2026-84190

CVE-2026-84137

Published

2026-09-01

Updated

2026-10-10

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2

Description A spoofing issue exists within the DOM: Core & HTML component.

Recommendations Update Firefox to version 155. Update Firefox ESR to version 153.2. Update Thunderbird to version 155. Update Thunderbird to version 153.2.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-346: Origin Validation Error

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Related identifiers

CVE-2026-84137

CLSA-2026-1788696027

OPENSUSE-SU-2026:11666-1