{"id":"CVE-2026-109755","published":"2026-10-13T13:17:26.417","lastModified":"2026-10-15T20:17:08.070","description":"Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-693"],"vendors":[],"products":[],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068448","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows attackers to escape the browser sandbox and gain access to the underlying system by exploiting a flaw in the DOM's Content Processes component. This critical flaw enables arbitrary code execution with high privileges.","exploitability":"Exploitation requires user interaction through a malicious webpage, making it moderately difficult but achievable with social engineering, and relies on the victim visiting an attacker-controlled site.","blast_radius":"If exploited, this vulnerability could compromise entire user systems, allowing attackers to execute arbitrary code, access files, and potentially escalate privileges across the entire operating system.","remediation":"Upgrade to Firefox 158 or Thunderbird 158 immediately to remediate this critical sandbox escape vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sandbox-escape","browser","rce"],"model":"garnet-coder","analyzedAt":"2026-10-16T08:47:37.571Z"}}