CVE-2026-113470

5.4 Moyenne

Publiée le 20/10/2026 à 15:16 · Modifiée le 21/10/2026 à 22:17 · En attente d'analyse NVD · Source : security@mozilla.org

Description

Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2.

Traduire en français

Produits concernés

Mozilla Firefox
Mozilla Thunderbird

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.4 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-295

Références

https://bugzilla.mozilla.org/show_bug.cgi?id=2084311
https://www.mozilla.org/security/advisories/mfsa2026-111/
https://www.mozilla.org/security/advisories/mfsa2026-112/
https://www.mozilla.org/security/advisories/mfsa2026-113/
https://www.mozilla.org/security/advisories/mfsa2026-114/
https://www.mozilla.org/security/advisories/mfsa2026-115/
https://www.mozilla.org/security/advisories/mfsa2026-116/
http://www.openwall.com/lists/oss-security/2026/10/20/30
https://lists.debian.org/debian-lts-announce/2026/10/msg00041.html

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories