CVE-2026-109780

CVE-2026-109780

published October 13, 2026

CVSS

—

EPSS

0%

Percentile

9.1

In the wild

Unconfirmed

What it is

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.00198 · 9.1th percentile
Published: 2026-10-13T17:17Z

References (3)

https://bugzilla.mozilla.org/show_bug.cgi?id=2072775 · [email protected]https://www.mozilla.org/security/advisories/mfsa2026-106/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2026-109/ · [email protected]

EPSS history

Timeline

15 OCT 03:28Z
EPSS moved — → 0%
epss
13 OCT 12:29Z
Mitigation bypass in the DOM: Core & HTML component
cvelistv5
13 OCT 12:29Z
Mitigation bypass in the DOM: Core & HTML component
cvelistv5