Back to feed
EUVD-2026-88919 · Published Sep 29, 2026 · 3w ago
Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Technologies
Mozilla FirefoxMozilla Thunderbird
Weaknesses
CWE-416
CVSS scores
- v3.18.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=2063680
- https://www.mozilla.org/security/advisories/mfsa2026-100/
- https://www.mozilla.org/security/advisories/mfsa2026-97/
- https://www.mozilla.org/security/advisories/mfsa2026-98/
- https://www.mozilla.org/security/advisories/mfsa2026-99/
- https://www.mozilla.org/security/advisories/mfsa2026-101/
Potentially impacted assets
See if this affects your attack surface
