Mozilla Products Multiple Vulnerabilities

Mozilla Products Multiple Vulnerabilities

Release Date: 22 Oct 2026

Multiple vulnerabilities were identified in Mozilla Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, security restriction bypass and sensitive information disclosure on the targeted system.

---

Impact

• Denial of Service
• Security Restriction Bypass
• Information Disclosure

---

System / Technologies affected

Versions prior to:

 

• Firefox 158.0.1
• Firefox ESR 153.5.1
• Firefox ESR 115.43.1
• Thunderbird 158.0.1
• Thunderbird 153.5.1
• Firefox for Android 158.0.2

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

• Firefox 158.0.1
• Firefox ESR 153.5.1
• Firefox ESR 115.43.1
• Thunderbird 158.0.1
• Thunderbird 153.5.1
• Firefox for Android 158.0.2

---

Vulnerability Identifier

• CVE-2026-113399
• CVE-2026-113400
• CVE-2026-113401
• CVE-2026-113470
• CVE-2026-113866
• CVE-2026-113867
• CVE-2026-113868
• CVE-2026-113869

---

Source

• Mozilla

---

Related Link

• https://www.mozilla.org/en-US/security/advisories/mfsa2026-111/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-112/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-113/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-114/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-116/