Vulnerability Details CVE-2026-100778
Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 25.2%
CVSS Severity
CVSS v3 Score 9.6
Products affected by CVE-2026-100778
-
cpe:2.3:a:mozilla:firefox:115.0.1
-
cpe:2.3:a:mozilla:firefox:115.0.2
-
cpe:2.3:a:mozilla:firefox:115.0.3
-
cpe:2.3:a:mozilla:firefox:115.1.0
-
cpe:2.3:a:mozilla:firefox:115.10.0
-
cpe:2.3:a:mozilla:firefox:115.11.0
-
cpe:2.3:a:mozilla:firefox:115.12.0
-
cpe:2.3:a:mozilla:firefox:115.13.0
-
cpe:2.3:a:mozilla:firefox:115.14.0
-
cpe:2.3:a:mozilla:firefox:115.15.0
-
cpe:2.3:a:mozilla:firefox:115.16.0
-
cpe:2.3:a:mozilla:firefox:115.16.1
-
cpe:2.3:a:mozilla:firefox:115.17.0
-
cpe:2.3:a:mozilla:firefox:115.18.0
-
cpe:2.3:a:mozilla:firefox:115.19.0
-
cpe:2.3:a:mozilla:firefox:115.2.0
-
cpe:2.3:a:mozilla:firefox:115.2.1
-
cpe:2.3:a:mozilla:firefox:115.20.0
-
cpe:2.3:a:mozilla:firefox:115.21.0
-
cpe:2.3:a:mozilla:firefox:115.21.1
-
cpe:2.3:a:mozilla:firefox:115.22.0
-
cpe:2.3:a:mozilla:firefox:115.23.0
-
cpe:2.3:a:mozilla:firefox:115.23.1
-
cpe:2.3:a:mozilla:firefox:115.24.0
-
cpe:2.3:a:mozilla:firefox:115.25.0
-
cpe:2.3:a:mozilla:firefox:115.26.0
-
cpe:2.3:a:mozilla:firefox:115.28.0
-
cpe:2.3:a:mozilla:firefox:115.29.0
-
cpe:2.3:a:mozilla:firefox:115.3.0
-
cpe:2.3:a:mozilla:firefox:115.3.1
-
cpe:2.3:a:mozilla:firefox:115.30.0
-
cpe:2.3:a:mozilla:firefox:115.31.0
-
cpe:2.3:a:mozilla:firefox:115.32.0
-
cpe:2.3:a:mozilla:firefox:115.32.1
-
cpe:2.3:a:mozilla:firefox:115.33.0
-
cpe:2.3:a:mozilla:firefox:115.34.0
-
cpe:2.3:a:mozilla:firefox:115.34.1
-
cpe:2.3:a:mozilla:firefox:115.35.0
-
cpe:2.3:a:mozilla:firefox:115.35.1
-
cpe:2.3:a:mozilla:firefox:115.35.2
-
cpe:2.3:a:mozilla:firefox:115.36.0
-
cpe:2.3:a:mozilla:firefox:115.37.0
-
cpe:2.3:a:mozilla:firefox:115.38.0
-
cpe:2.3:a:mozilla:firefox:115.39.0
-
cpe:2.3:a:mozilla:firefox:115.4.0
-
cpe:2.3:a:mozilla:firefox:115.4.1
-
cpe:2.3:a:mozilla:firefox:115.5.0
-
cpe:2.3:a:mozilla:firefox:115.6.0
-
cpe:2.3:a:mozilla:firefox:115.7.0
-
cpe:2.3:a:mozilla:firefox:115.8.0
-
cpe:2.3:a:mozilla:firefox:115.9.0
-
cpe:2.3:a:mozilla:firefox:115.9.1
-
cpe:2.3:a:mozilla:firefox:140.0.0
-
cpe:2.3:a:mozilla:firefox:140.0.1
-
cpe:2.3:a:mozilla:firefox:140.0.2
-
cpe:2.3:a:mozilla:firefox:140.0.4
-
cpe:2.3:a:mozilla:firefox:140.1.0
-
cpe:2.3:a:mozilla:firefox:140.10.0
-
cpe:2.3:a:mozilla:firefox:140.10.1
-
cpe:2.3:a:mozilla:firefox:140.10.2
-
cpe:2.3:a:mozilla:firefox:140.11.0
-
cpe:2.3:a:mozilla:firefox:140.12.0
-
cpe:2.3:a:mozilla:firefox:140.13.0
-
cpe:2.3:a:mozilla:firefox:140.14.0
-
cpe:2.3:a:mozilla:firefox:140.15.0
-
cpe:2.3:a:mozilla:firefox:140.2.0
-
cpe:2.3:a:mozilla:firefox:140.3
-
cpe:2.3:a:mozilla:firefox:140.3.0
-
cpe:2.3:a:mozilla:firefox:140.3.1
-
cpe:2.3:a:mozilla:firefox:140.4.0
-
cpe:2.3:a:mozilla:firefox:140.5.0
-
cpe:2.3:a:mozilla:firefox:140.6.0
-
cpe:2.3:a:mozilla:firefox:140.7.0
-
cpe:2.3:a:mozilla:firefox:140.7.1
-
cpe:2.3:a:mozilla:firefox:140.8.0
-
cpe:2.3:a:mozilla:firefox:140.9.0
-
cpe:2.3:a:mozilla:firefox:140.9.1
-
cpe:2.3:a:mozilla:firefox:154.0.0
-
cpe:2.3:a:mozilla:firefox:154.0.1
-
cpe:2.3:a:mozilla:firefox:155.0.0
-
cpe:2.3:a:mozilla:thunderbird:140.0
-
cpe:2.3:a:mozilla:thunderbird:140.0.1
-
cpe:2.3:a:mozilla:thunderbird:140.1.0
-
cpe:2.3:a:mozilla:thunderbird:140.1.1
-
cpe:2.3:a:mozilla:thunderbird:140.10.0
-
cpe:2.3:a:mozilla:thunderbird:140.10.1
-
cpe:2.3:a:mozilla:thunderbird:140.10.2
-
cpe:2.3:a:mozilla:thunderbird:140.11.0
-
cpe:2.3:a:mozilla:thunderbird:140.12.0
-
cpe:2.3:a:mozilla:thunderbird:140.12.1
-
cpe:2.3:a:mozilla:thunderbird:140.14.0
-
cpe:2.3:a:mozilla:thunderbird:140.15.0
-
cpe:2.3:a:mozilla:thunderbird:140.16.0
-
cpe:2.3:a:mozilla:thunderbird:140.2.0
-
cpe:2.3:a:mozilla:thunderbird:140.2.1
-
cpe:2.3:a:mozilla:thunderbird:140.3.0
-
cpe:2.3:a:mozilla:thunderbird:140.3.1
-
cpe:2.3:a:mozilla:thunderbird:140.4.0
-
cpe:2.3:a:mozilla:thunderbird:140.5.0
-
cpe:2.3:a:mozilla:thunderbird:140.6.0
-
cpe:2.3:a:mozilla:thunderbird:140.7.0
-
cpe:2.3:a:mozilla:thunderbird:140.7.1
-
cpe:2.3:a:mozilla:thunderbird:140.7.2
-
cpe:2.3:a:mozilla:thunderbird:140.8.0
-
cpe:2.3:a:mozilla:thunderbird:140.8.1
-
cpe:2.3:a:mozilla:thunderbird:140.9.0
-
cpe:2.3:a:mozilla:thunderbird:140.9.1
-
cpe:2.3:a:mozilla:thunderbird:153.0
-
cpe:2.3:a:mozilla:thunderbird:153.0.1
-
cpe:2.3:a:mozilla:thunderbird:153.0.2
-
cpe:2.3:a:mozilla:thunderbird:153.0.3
-
cpe:2.3:a:mozilla:thunderbird:153.1.0
-
cpe:2.3:a:mozilla:thunderbird:153.1.1
-
cpe:2.3:a:mozilla:thunderbird:153.2.0
-
cpe:2.3:a:mozilla:thunderbird:153.3.0
-
cpe:2.3:a:mozilla:thunderbird:153.3.1
-
cpe:2.3:a:mozilla:thunderbird:154.0
-
cpe:2.3:a:mozilla:thunderbird:155.0
-
cpe:2.3:a:mozilla:thunderbird:155.0.1
-
cpe:2.3:a:mozilla:thunderbird:156.0
-
cpe:2.3:a:mozilla:thunderbird:156.0.1