CRITICAL 9.6 NVD
CVE-2026-109705
Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 1
Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=2040905
- https://www.mozilla.org/security/advisories/mfsa2026-106/
- https://www.mozilla.org/security/advisories/mfsa2026-108/
This critical severity vulnerability with a CVSS score of 9.6 was published on 2026-10-13 via NVD.
Risk Timeline
CVE Disclosed2026-10-13 · -1 days ago
Remediation Resources
Official Advisory
www.mozilla.org/security/advisories/mfsa2026-106/Official Advisory
www.mozilla.org/security/advisories/mfsa2026-108/Analysis & PoC
bugzilla.mozilla.org/show_bug.cgi?id=2040905
vulnfeed aggregates 13242 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.