{"id":"CVE-2026-109707","published":"2026-10-13T13:17:20.803","lastModified":"2026-10-13T19:18:33.973","description":"Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2059150","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Firefox's Networking component allows attackers to escape the sandbox and gain full system access. This critical flaw enables remote code execution through a memory corruption issue.","exploitability":"Exploitation requires a user visiting a malicious website with a crafted payload, making it moderately difficult but possible with social engineering, and relies on the browser being in its default security configuration.","blast_radius":"If exploited, this vulnerability could affect millions of Firefox users globally, potentially leading to complete system compromise and data theft across desktop and mobile platforms.","remediation":"Upgrade to Firefox 158 or Thunderbird 158 immediately, as these versions contain the fix for CVE-2026-109707.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sandbox-escape","memory-corruption","browser","rce"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:53:29.202Z"}}