CVE-2026-109708

Summary

This vulnerability allows attackers to escape the browser sandbox through flawed boundary checks in the networking component, potentially leading to full system compromise. The high CVSS score indicates a critical risk that can be exploited remotely.

Exploitability

Exploitation requires a user to visit a malicious website or open a crafted email attachment, making it moderately difficult but achievable with social engineering.

Blast radius

If exploited, this vulnerability could affect millions of Firefox and Thunderbird users across multiple platforms, potentially leading to complete system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Firefox 158, Firefox ESR 153.5, Thunderbird 158, or Thunderbird 153.5 immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.