Veille CVE

Jeudi 15 octobre 2026

9 CVE

  1. CVE-2026-109776 4.2 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  2. CVE-2026-109757 8.3 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  3. CVE-2026-109755 9.6 Critique

    Mozilla Firefox · Mozilla Thunderbird

    Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  4. CVE-2026-109753 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  5. CVE-2026-109733 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  6. CVE-2026-109730 8.8 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  7. CVE-2026-109723 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  8. CVE-2026-109714 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  9. CVE-2026-109708 9.6 Critique

    Mozilla Firefox · Mozilla Thunderbird

    Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.