CVE Feed

    Dashboard / CVE / CVE-2026-113470

    CVE-2026-113470

    Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2.

    Published:Oct 20, 2026
    Last Modified:Oct 21, 2026
    EPS:Oct 20, 2026
    EPSS Score:0.00198
    CVSS Score:5.4

    Affected Products

    Vendor
    Mozilla
    Product
    Firefox

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Related CVEs

    CVE-2026-113401 (CVSS 6.5) — Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird…
    CVE-2026-113400 (CVSS 5.4) — Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and …
    CVE-2026-113399 — Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunde…
    CVE-2026-109783 — Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunde…
    CVE-2026-109782 — Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunde…
    CVE-2026-109781 (CVSS 6.5) — Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR …
    CVE-2026-109780 — Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbi…
    CVE-2026-109779 (CVSS 4.2) — Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 1…
    CVE-2026-109778 (CVSS 8.8) — Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR …
    CVE-2026-109777 (CVSS 4.3) — Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firef…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High