Veille CVE

Lundi 19 octobre 2026

19 CVE

  1. CVE-2026-109770 6.1 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  2. CVE-2026-109764 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  3. CVE-2026-109762 8.8 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  4. CVE-2026-109750 9.6 Critique

    Mozilla Firefox · Mozilla Thunderbird

    Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  5. CVE-2026-109766 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  6. CVE-2026-109760 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  7. CVE-2026-109759 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  8. CVE-2026-109754 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  9. CVE-2026-109747 7.3 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  10. CVE-2026-109746 7.3 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

  11. CVE-2026-109745 9.6 Critique

    Mozilla Firefox · Mozilla Thunderbird

    Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  12. CVE-2026-109744 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  13. CVE-2026-109740 9.6 Critique

    Mozilla Firefox · Mozilla Thunderbird

    Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  14. CVE-2026-109737 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  15. CVE-2026-109736 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  16. CVE-2026-109734 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  17. CVE-2026-109731 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  18. CVE-2026-109721 5.4 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  19. CVE-2026-109720 7.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.