CVE-2026-109705
CRITICAL NVDCVSS Score
9.6
Severity
CRITICAL
Source
NVD
Published
Oct 13, 2026
Description
Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.