CVE-2026-113399

CVE-2026-113399

published October 20, 2026

CVSS

—

EPSS

0%

Percentile

7.1

In the wild

Unconfirmed

What it is

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.00179 · 7.1th percentile
Published: 2026-10-20T17:16Z

References (3)

https://bugzilla.mozilla.org/show_bug.cgi?id=2079938 · [email protected]https://www.mozilla.org/security/advisories/mfsa2026-111/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2026-114/ · [email protected]

EPSS history

Timeline

22 OCT 03:29Z
EPSS moved — → 0%
epss
20 OCT 12:58Z
Incorrect boundary conditions in the SVG component
cvelistv5
20 OCT 12:58Z
Incorrect boundary conditions in the SVG component
cvelistv5