Race Condition Vulnerability in Firefox Networking Component
CVE-2026-109757

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 13 October 2026

What is CVE-2026-109757?

This vulnerability involves a sandbox escape caused by a race condition within the Networking component of Firefox. This flaw potentially allows unauthorized access, undermining the security model of the browser. Mozilla has addressed this issue, and users are encouraged to update to Firefox version 158 or Firefox ESR version 153.5 to mitigate any risks associated with this vulnerability.

Affected Version(s)

Firefox 153.5

Firefox 158

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2069910

https://www.mozilla.org/security/advisories/mfsa2026-106/

https://www.mozilla.org/security/advisories/mfsa2026-108/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 13, 2026
Vulnerability Reserved
Oct 13, 2026

Credit

Yaqoub Aldurayhim

CVE-2026-109757 Data

JSON