Denial-of-Service Vulnerability in Mozilla Firefox WebRTC Component
CVE-2026-109775

Currently unrated

Key Information:

Vendor

Mozilla
Status
Firefox
Vendor
CVE Published:
13 October 2026

What is CVE-2026-109775?

A denial-of-service vulnerability was identified in the WebRTC component of Mozilla Firefox, causing instability and crashes in the application. This issue was addressed in the security patches released for Firefox version 158 and Firefox ESR version 153.5, enhancing the overall security and stability of the browser's WebRTC functionality. Users are encouraged to update their applications promptly to maintain robust security.

Affected Version(s)

Firefox 153.5

Firefox 158

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2068255
https://www.mozilla.org/security/advisories/mfsa2026-106/
https://www.mozilla.org/security/advisories/mfsa2026-108/

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Shu Takahashi of Velcore Consulting Inc.
.