CVE-2026-109712

7.1High

Published 13 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

7.1High

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required
Impact: Limited impact
Weakness: CWE-908

Impact

Attackers can escape the browser sandbox and compromise the host system if a user visits a malicious page or opens malicious content. Exploitation requires user interaction to render untrusted graphics.

Root cause

Uninitialized memory in the Graphics component allows a sandbox escape.

Affected systems

Firefox versions prior to 158, Firefox ESR prior to 115.43 and 153.5, and Thunderbird prior to 158 and 153.5.

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Fix & remediation

Upgrade to Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, or Thunderbird 153.5. No interim configuration mitigation is available.

shell

$ sudo apt-get update && sudo apt-get install --only-upgrade firefox thunderbird

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-109712