Firefox and Thunderbird Networking component vulnerabilities

3 known CVE vulnerabilities in Firefox and Thunderbird Networking component, translated and rated.

CVE-2026-109708Critical
A sandbox escape vulnerability in the Networking component of Firefox and Thunderbird is caused by incorrect boundary conditions. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.
CVE-2026-109707Critical
A use-after-free vulnerability in the Networking component of Firefox and Thunderbird enables a sandbox escape. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.
CVE-2026-109705Critical
A vulnerability in the Networking component of Firefox and Thunderbird combines incorrect boundary conditions and use-after-free, leading to a sandbox escape and site isolation issue. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS