Information Disclosure in Firefox by Mozilla
CVE-2026-109777

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 13 October 2026

What is CVE-2026-109777?

The vulnerability in the IndexedDB component of Firefox could enable unauthorized information access. This flaw was resolved in Firefox version 158 and Firefox ESR version 153.5, ensuring improved data security and user confidentiality by mitigating potential risks associated with this exposure.

Affected Version(s)

Firefox 153.5

Firefox 158

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2069638

https://www.mozilla.org/security/advisories/mfsa2026-106/

https://www.mozilla.org/security/advisories/mfsa2026-108/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 13, 2026
Vulnerability Reserved
Oct 13, 2026

Credit

Shu Takahashi of Velcore Consulting Inc.

CVE-2026-109777 Data

JSON