Same-Origin Policy Bypass in Firefox by Mozilla
CVE-2026-109772

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 13 October 2026

What is CVE-2026-109772?

A vulnerability in the DevTools component of Firefox allows attackers to bypass the same-origin policy. This could potentially enable malicious scripts to interact with data from other origins, compromising user privacy and security. Mozilla addressed this issue in version 158 of Firefox, urging users to update their browsers to the latest version to mitigate the risk of exploitation.

Affected Version(s)

Firefox 158

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2066063

https://www.mozilla.org/security/advisories/mfsa2026-106/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 13, 2026
Vulnerability Reserved
Oct 13, 2026

Credit

Finn Westendorf

CVE-2026-109772 Data

JSON