CVE-2026-96869

Published: Sep 29, 2026Modified: Oct 5, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Affected (6)

Products: Mozilla: Firefox, Thunderbird

Mozilla

2 products

Firefox

Thunderbird

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	version < 140.17.0
Mozilla Firefox	141.0 ≤ version < 153.4.0
Mozilla Firefox	154.0.0 ≤ version < 157.0.0
Mozilla Thunderbird	version < 140.17.0
Mozilla Thunderbird	141.0 ≤ version < 153.4.0
Mozilla Thunderbird	154.0 ≤ version < 157.0