Vulnerability Details CVE-2026-100766
Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 17.5%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2026-100766
-
cpe:2.3:a:mozilla:firefox:116.0.1
-
cpe:2.3:a:mozilla:firefox:116.0.2
-
cpe:2.3:a:mozilla:firefox:116.0.3
-
cpe:2.3:a:mozilla:firefox:117.0
-
cpe:2.3:a:mozilla:firefox:117.0.1
-
cpe:2.3:a:mozilla:firefox:118.0
-
cpe:2.3:a:mozilla:firefox:118.0.1
-
cpe:2.3:a:mozilla:firefox:118.0.2
-
cpe:2.3:a:mozilla:firefox:119.0
-
cpe:2.3:a:mozilla:firefox:119.0.1
-
cpe:2.3:a:mozilla:firefox:120.0
-
cpe:2.3:a:mozilla:firefox:120.0.1
-
cpe:2.3:a:mozilla:firefox:121.0
-
cpe:2.3:a:mozilla:firefox:121.0.1
-
cpe:2.3:a:mozilla:firefox:122.0
-
cpe:2.3:a:mozilla:firefox:122.0.1
-
cpe:2.3:a:mozilla:firefox:123.0
-
cpe:2.3:a:mozilla:firefox:123.0.1
-
cpe:2.3:a:mozilla:firefox:124.0
-
cpe:2.3:a:mozilla:firefox:124.0.1
-
cpe:2.3:a:mozilla:firefox:124.0.2
-
cpe:2.3:a:mozilla:firefox:125.0.1
-
cpe:2.3:a:mozilla:firefox:125.0.2
-
cpe:2.3:a:mozilla:firefox:125.0.3
-
cpe:2.3:a:mozilla:firefox:126.0
-
cpe:2.3:a:mozilla:firefox:126.0.1
-
cpe:2.3:a:mozilla:firefox:127.0
-
cpe:2.3:a:mozilla:firefox:127.0.1
-
cpe:2.3:a:mozilla:firefox:127.0.2
-
cpe:2.3:a:mozilla:firefox:128.0
-
cpe:2.3:a:mozilla:firefox:128.0.0
-
cpe:2.3:a:mozilla:firefox:128.0.2
-
cpe:2.3:a:mozilla:firefox:128.0.3
-
cpe:2.3:a:mozilla:firefox:128.1.0
-
cpe:2.3:a:mozilla:firefox:128.10
-
cpe:2.3:a:mozilla:firefox:128.10.0
-
cpe:2.3:a:mozilla:firefox:128.10.1
-
cpe:2.3:a:mozilla:firefox:128.11.0
-
cpe:2.3:a:mozilla:firefox:128.12.0
-
cpe:2.3:a:mozilla:firefox:128.13.0
-
cpe:2.3:a:mozilla:firefox:128.14.0
-
cpe:2.3:a:mozilla:firefox:128.2.0
-
cpe:2.3:a:mozilla:firefox:128.3.0
-
cpe:2.3:a:mozilla:firefox:128.3.1
-
cpe:2.3:a:mozilla:firefox:128.4.0
-
cpe:2.3:a:mozilla:firefox:128.5.0
-
cpe:2.3:a:mozilla:firefox:128.5.1
-
cpe:2.3:a:mozilla:firefox:128.5.2
-
cpe:2.3:a:mozilla:firefox:128.6.0
-
cpe:2.3:a:mozilla:firefox:128.7.0
-
cpe:2.3:a:mozilla:firefox:128.8.0
-
cpe:2.3:a:mozilla:firefox:128.8.1
-
cpe:2.3:a:mozilla:firefox:128.9.0
-
cpe:2.3:a:mozilla:firefox:129
-
cpe:2.3:a:mozilla:firefox:129.0
-
cpe:2.3:a:mozilla:firefox:129.0.0
-
cpe:2.3:a:mozilla:firefox:129.0.1
-
cpe:2.3:a:mozilla:firefox:129.0.2
-
cpe:2.3:a:mozilla:firefox:130.0
-
cpe:2.3:a:mozilla:firefox:130.0.0
-
cpe:2.3:a:mozilla:firefox:130.0.1
-
cpe:2.3:a:mozilla:firefox:131.0
-
cpe:2.3:a:mozilla:firefox:131.0.0
-
cpe:2.3:a:mozilla:firefox:131.0.2
-
cpe:2.3:a:mozilla:firefox:131.0.3
-
cpe:2.3:a:mozilla:firefox:132.0.0
-
cpe:2.3:a:mozilla:firefox:132.0.1
-
cpe:2.3:a:mozilla:firefox:132.0.2
-
cpe:2.3:a:mozilla:firefox:133.0.0
-
cpe:2.3:a:mozilla:firefox:133.0.3
-
cpe:2.3:a:mozilla:firefox:134.0.0
-
cpe:2.3:a:mozilla:firefox:134.0.1
-
cpe:2.3:a:mozilla:firefox:134.0.2
-
cpe:2.3:a:mozilla:firefox:135.0.0
-
cpe:2.3:a:mozilla:firefox:135.0.1
-
cpe:2.3:a:mozilla:firefox:136.0
-
cpe:2.3:a:mozilla:firefox:136.0.0
-
cpe:2.3:a:mozilla:firefox:136.0.1
-
cpe:2.3:a:mozilla:firefox:136.0.2
-
cpe:2.3:a:mozilla:firefox:136.0.3
-
cpe:2.3:a:mozilla:firefox:136.0.4
-
cpe:2.3:a:mozilla:firefox:137.0.0
-
cpe:2.3:a:mozilla:firefox:137.0.1
-
cpe:2.3:a:mozilla:firefox:137.0.2
-
cpe:2.3:a:mozilla:firefox:138.0.0
-
cpe:2.3:a:mozilla:firefox:138.0.1
-
cpe:2.3:a:mozilla:firefox:138.0.3
-
cpe:2.3:a:mozilla:firefox:138.0.4
-
cpe:2.3:a:mozilla:firefox:139.0.0
-
cpe:2.3:a:mozilla:firefox:139.0.1
-
cpe:2.3:a:mozilla:firefox:139.0.4
-
cpe:2.3:a:mozilla:firefox:140.0
-
cpe:2.3:a:mozilla:firefox:140.0.0
-
cpe:2.3:a:mozilla:firefox:140.0.1
-
cpe:2.3:a:mozilla:firefox:140.0.2
-
cpe:2.3:a:mozilla:firefox:140.0.4
-
cpe:2.3:a:mozilla:firefox:140.1.0
-
cpe:2.3:a:mozilla:firefox:140.10.0
-
cpe:2.3:a:mozilla:firefox:140.10.1
-
cpe:2.3:a:mozilla:firefox:140.10.2
-
cpe:2.3:a:mozilla:firefox:140.11.0
-
cpe:2.3:a:mozilla:firefox:140.12.0
-
cpe:2.3:a:mozilla:firefox:140.13.0
-
cpe:2.3:a:mozilla:firefox:140.14.0
-
cpe:2.3:a:mozilla:firefox:140.15.0
-
cpe:2.3:a:mozilla:firefox:140.2.0
-
cpe:2.3:a:mozilla:firefox:140.3
-
cpe:2.3:a:mozilla:firefox:140.3.0
-
cpe:2.3:a:mozilla:firefox:140.3.1
-
cpe:2.3:a:mozilla:firefox:140.4.0
-
cpe:2.3:a:mozilla:firefox:140.5.0
-
cpe:2.3:a:mozilla:firefox:140.6.0
-
cpe:2.3:a:mozilla:firefox:140.7.0
-
cpe:2.3:a:mozilla:firefox:140.7.1
-
cpe:2.3:a:mozilla:firefox:140.8.0
-
cpe:2.3:a:mozilla:firefox:140.9.0
-
cpe:2.3:a:mozilla:firefox:140.9.1
-
cpe:2.3:a:mozilla:firefox:154.0.0
-
cpe:2.3:a:mozilla:firefox:154.0.1
-
cpe:2.3:a:mozilla:firefox:155.0.0
-
cpe:2.3:a:mozilla:thunderbird:141.0
-
cpe:2.3:a:mozilla:thunderbird:142.0
-
cpe:2.3:a:mozilla:thunderbird:143.0
-
cpe:2.3:a:mozilla:thunderbird:143.0.1
-
cpe:2.3:a:mozilla:thunderbird:144.0
-
cpe:2.3:a:mozilla:thunderbird:144.0.1
-
cpe:2.3:a:mozilla:thunderbird:145.0
-
cpe:2.3:a:mozilla:thunderbird:146.0
-
cpe:2.3:a:mozilla:thunderbird:146.0.1
-
cpe:2.3:a:mozilla:thunderbird:147.0
-
cpe:2.3:a:mozilla:thunderbird:147.0.1
-
cpe:2.3:a:mozilla:thunderbird:147.0.2
-
cpe:2.3:a:mozilla:thunderbird:148.0
-
cpe:2.3:a:mozilla:thunderbird:148.0.1
-
cpe:2.3:a:mozilla:thunderbird:149.0
-
cpe:2.3:a:mozilla:thunderbird:149.0.1
-
cpe:2.3:a:mozilla:thunderbird:149.0.2
-
cpe:2.3:a:mozilla:thunderbird:150.0
-
cpe:2.3:a:mozilla:thunderbird:150.0.1
-
cpe:2.3:a:mozilla:thunderbird:150.0.2
-
cpe:2.3:a:mozilla:thunderbird:151.0.0
-
cpe:2.3:a:mozilla:thunderbird:151.0.1
-
cpe:2.3:a:mozilla:thunderbird:152.0.0
-
cpe:2.3:a:mozilla:thunderbird:152.0.1
-
cpe:2.3:a:mozilla:thunderbird:153.0
-
cpe:2.3:a:mozilla:thunderbird:153.0.1
-
cpe:2.3:a:mozilla:thunderbird:153.0.2
-
cpe:2.3:a:mozilla:thunderbird:153.0.3
-
cpe:2.3:a:mozilla:thunderbird:153.1.0
-
cpe:2.3:a:mozilla:thunderbird:153.1.1
-
cpe:2.3:a:mozilla:thunderbird:153.2.0
-
cpe:2.3:a:mozilla:thunderbird:153.3.0
-
cpe:2.3:a:mozilla:thunderbird:153.3.1
-
cpe:2.3:a:mozilla:thunderbird:154.0
-
cpe:2.3:a:mozilla:thunderbird:155.0
-
cpe:2.3:a:mozilla:thunderbird:155.0.1
-
cpe:2.3:a:mozilla:thunderbird:156.0
-
cpe:2.3:a:mozilla:thunderbird:156.0.1