OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-100811

CRITICAL · CVSS 9.6 EPSS 0.26%

Source: NVD + CISA KEV + EPSS · Published 2026-09-29 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

A critical use-after-free vulnerability in the DOM components of Firefox allows for sandbox escape, potentially enabling attackers to execute arbitrary code within the browser environment. This flaw impacts users of affected Firefox versions, making it essential for organizations and individuals using Firefox to prioritize updates to versions 153.4, 157, or 140.17 of Firefox ESR to mitigate the risk.

CVE
CVE-2026-100811
Severity
CRITICAL
CVSS
9.6
EPSS
0.26%
Firefox

Original NVD Description

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-96869 MEDIUM CVE-2026-100832 HIGH CVE-2026-100823 MEDIUM CVE-2026-100820 HIGH CVE-2026-100819 CRITICAL CVE-2026-100818 CRITICAL