CVE-2026-109747
Full vulnerability record from the local CVENow database.
Description
Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
Severity
HIGH
CVSS score
7.3
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2026-10-13 13:17:25.577000
Last modified
2026-10-19 13:16:54.380000
View original CVE JSON
{
"id": "CVE-2026-109747",
"sourceIdentifier": "[email protected]",
"published": "2026-10-13T13:17:25.577",
"lastModified": "2026-10-19T13:16:54.380",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Mozilla",
"product": "Firefox",
"versions": [
{
"version": "158",
"lessThanOrEqual": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Mozilla",
"product": "Thunderbird",
"versions": [
{
"version": "158",
"lessThanOrEqual": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-19T12:23:45.999292Z",
"id": "CVE-2026-109747",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-451"
}
]
}
],
"references": [
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2065402",
"source": "[email protected]"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-106/",
"source": "[email protected]"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-109/",
"source": "[email protected]"
}
]
}