OCTOBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-100803

HIGH · CVSS 8.1 EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-09-29 · Last synced 2026-10-08

CyberRota Analysis

AI-Generated

A same-origin policy bypass vulnerability in the WebExtensions component of Firefox could allow malicious web content to access sensitive data from other origins, potentially leading to data leakage or unauthorized actions. Users and organizations utilizing affected versions of Firefox should prioritize updates to the fixed versions to mitigate the risk of exploitation.

CVE
CVE-2026-100803
Severity
HIGH
CVSS
8.1
EPSS
0.19%
Firefox

Original NVD Description

Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.