OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-100804

CRITICAL · CVSS 9.6 EPSS 0.30%

Source: NVD + CISA KEV + EPSS · Published 2026-09-29 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

A critical use-after-free vulnerability in the Preferences: Backend component of Firefox allows for sandbox escape, potentially enabling an attacker to execute arbitrary code outside the browser's security confines. Users and organizations relying on Firefox should prioritize updating to version 157 to mitigate the risk of exploitation. This vulnerability poses a significant threat to any environment where Firefox is deployed, particularly those handling sensitive data.

CVE
CVE-2026-100804
Severity
CRITICAL
CVSS
9.6
EPSS
0.30%
Firefox

Original NVD Description

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.