CVE-2026-109751

Published: Oct 13, 2026Modified: Oct 13, 2026Deferred

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (5)

https://bugzilla.mozilla.org/show_bug.cgi?id=2068372

Source: security@mozilla.org

https://www.mozilla.org/security/advisories/mfsa2026-106/

Source: security@mozilla.org

https://www.mozilla.org/security/advisories/mfsa2026-108/

Source: security@mozilla.org

https://www.mozilla.org/security/advisories/mfsa2026-109/

Source: security@mozilla.org

https://www.mozilla.org/security/advisories/mfsa2026-110/

Source: security@mozilla.org

Timeline

No history available yet.