{"id":"CVE-2026-106016","published":"2026-10-06T13:16:47.290","lastModified":"2026-10-08T13:38:17.850","description":"Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-693"],"vendors":["mozilla"],"products":["firefox"],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2067465","tags":["Permissions Required"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-104/","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This flaw allows an attacker to bypass mitigation controls in the File Handling component, leading to potential high impact on the system, including data loss, system compromise, and unauthorized access.","exploitability":"Exploitation is moderately difficult and requires the attacker to have access to the affected file handling mechanism.","blast_radius":"If exploited, the vulnerability could result in significant damage, including data exfiltration, system compromise, and unauthorized access to the system.","remediation":"Upgrade to Firefox 157.0.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["bypass","file-handling","mitigation","web","browser"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:40:36.670Z"}}