CVE Feed

    Dashboard / CVE / CVE-2026-109783

    CVE-2026-109783

    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.

    Published:Oct 13, 2026
    Last Modified:Oct 17, 2026
    EPS:Oct 13, 2026
    EPSS Score:0.00157
    CVSS Score:

    Affected Products

    Vendor
    Mozilla
    Product
    Firefox

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Related CVEs

    CVE-2026-113401 (CVSS 6.5) — Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird…
    CVE-2026-113400 (CVSS 5.4) — Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and …
    CVE-2026-113399 — Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunde…
    CVE-2026-113470 (CVSS 5.4) — Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability wa…
    CVE-2026-109782 — Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunde…
    CVE-2026-109781 (CVSS 6.5) — Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR …
    CVE-2026-109780 — Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbi…
    CVE-2026-109779 (CVSS 4.2) — Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 1…
    CVE-2026-109778 (CVSS 8.8) — Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR …
    CVE-2026-109777 (CVSS 4.3) — Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firef…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High