Multiple vulnerabilities in Mozilla products (October 14, 2026)

CERT-FR Advisory Subject: Multiple vulnerabilities in Mozilla products Document management A detailed version history is available at the end of this document. Risks - Data integrity compromise - Data confidentiality compromise - Security policy bypass - Remote Denial of Service - Not specified by the vendor - Privilege escalation Affected systems - Firefox ESR versions prior to 115.43 - Firefox ESR versions prior to 153.5 - Firefox versions prior to 158 - Thunderbird versions prior to 153.5 - Thunderbird versions prior to 158 Summary Multiple vulnerabilities have been discovered in Mozilla products. Some of these allow an attacker to cause privilege escalation, remote denial of service, and data confidentiality compromise. Solutions Refer to the vendor's security bulletin for patches (see Documentation section). Documentation - Mozilla Security Bulletin mfsa2026-106 dated October 13, 2026 https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/ - Mozilla Security Bulletin mfsa2026-107 dated October 13, 2026 https://www.mozilla.org/en-US/security/advisories/mfsa2026-107/ - Mozilla Security Bulletin mfsa2026-108 dated October 13, 2026 https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/ - Mozilla Security Bulletin mfsa2026-109 dated October 13, 2026 https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/ - Mozilla Security Bulletin mfsa2026-110 dated October 13, 2026 https://www.mozilla.org/en-US/security/advisories/mfsa2026-110/ - CVE Reference CVE-2026-106016 https://www.cve.org/CVERecord?id=CVE-2026-106016 - CVE Reference CVE-2026-109704 https://www.cve.org/CVERecord?id=CVE-2026-109704 - CVE Reference CVE-2026-109705 https://www.cve.org/CVERecord?id=CVE-2026-109705 - CVE Reference CVE-2026-109706 https://www.cve.org/CVERecord?id=CVE-2026-109706 - CVE Reference CVE-2026-109707 https://www.cve.org/CVERecord?id=CVE-2026-109707 - CVE Reference CVE-2026-109708 https://www.cve.org/CVERecord?id=CVE-2026-109708 - CVE Reference CVE-2026-109709 https://www.cve.org/CVERecord?id=CVE-2026-109709 - CVE Reference CVE-2026-109710 https://www.cve.org/CVERecord?id=CVE-2026-109710 - CVE Reference CVE-2026-109711 https://www.cve.org/CVERecord?id=CVE-2026-109711 - CVE Reference CVE-2026-109712 https://www.cve.org/CVERecord?id=CVE-2026-109712 - CVE Reference CVE-2026-109713 https://www.cve.org/CVERecord?id=CVE-2026-109713 - CVE Reference CVE-2026-109714 https://www.cve.org/CVERecord?id=CVE-2026-109714 - CVE Reference CVE-2026-109715 https://www.cve.org/CVERecord?id=CVE-2026-109715 - CVE Reference CVE-2026-109716 https://www.cve.org/CVERecord?id=CVE-2026-109716 - CVE Reference CVE-2026-109717 https://www.cve.org/CVERecord?id=CVE-2026-109717 - CVE Reference CVE-2026-109718 https://www.cve.org/CVERecord?id=CVE-2026-109718 - CVE Reference CVE-2026-109719 https://www.cve.org/CVERecord?id=CVE-2026-109719 - CVE Reference CVE-2026-109720 https://www.cve.org/CVERecord?id=CVE-2026-109720 - CVE Reference CVE-2026-109721 https://www.cve.org/CVERecord?id=CVE-2026-109721 - CVE Reference CVE-2026-109722 https://www.cve.org/CVERecord?id=CVE-2026-109722 - CVE Reference CVE-2026-109723 https://www.cve.org/CVERecord?id=CVE-2026-109723 - CVE Reference CVE-2026-109724 https://www.cve.org/CVERecord?id=CVE-2026-109724 - CVE Reference CVE-2026-109725 https://www.cve.org/CVERecord?id=CVE-2026-109725 - CVE Reference CVE-2026-109726 https://www.cve.org/CVERecord?id=CVE-2026-109726 - CVE Reference CVE-2026-109727 https://www.cve.org/CVERecord?id=CVE-2026-109727 - CVE Reference CVE-2026-109728 https://www.cve.org/CVERecord?id=CVE-2026-109728 - CVE Reference CVE-2026-109729 https://www.cve.org/CVERecord?id=CVE-2026-109729 - CVE Reference CVE-2026-109730 https://www.cve.org/CVERecord?id=CVE-2026-109730 - CVE Reference CVE-2026-109731 https://www.cve.org/CVERecord?id=CVE-2026-109731 - CVE Reference CVE-2026-109732 https://www.cve.org/CVERecord?id=CVE-2026-109732 - CVE Reference CVE-2026-109733 https://www.cve.org/CVERecord?id=CVE-2026-109733 - CVE Reference CVE-2026-109734 https://www.cve.org/CVERecord?id=CVE-2026-109734 - CVE Reference CVE-2026-109735 https://www.cve.org/CVERecord?id=CVE-2026-109735 - CVE Reference CVE-2026-109736 https://www.cve.org/CVERecord?id=CVE-2026-109736 - CVE Reference CVE-2026-109737 https://www.cve.org/CVERecord?id=CVE-2026-109737 - CVE Reference CVE-2026-109738 https://www.cve.org/CVERecord?id=CVE-2026-109738 - CVE Reference CVE-2026-109739 https://www.cve.org/CVERecord?id=CVE-2026-109739 - CVE Reference CVE-2026-109740 https://www.cve.org/CVERecord?id=CVE-2026-109740 - CVE Reference CVE-2026-109741 https://www.cve.org/CVERecord?id=CVE-2026-109741 - CVE Reference CVE-2026-109742 https://www.cve.org/CVERecord?id=CVE-2026-109742 - CVE Reference CVE-2026-109743 https://www.cve.org/CVERecord?id=CVE-2026-109743 - CVE Reference CVE-2026-109744 https://www.cve.org/CVERecord?id=CVE-2026-109744 - CVE Reference CVE-2026-109745 https://www.cve.org/CVERecord?id=CVE-2026-109745 - CVE Reference CVE-2026-109746 https://www.cve.org/CVERecord?id=CVE-2026-109746 - CVE Reference CVE-2026-109747 https://www.cve.org/CVERecord?id=CVE-2026-109747 - CVE Reference CVE-2026-109748 https://www.cve.org/CVERecord?id=CVE-2026-109748 - CVE Reference CVE-2026-109749 https://www.cve.org/CVERecord?id=CVE-2026-109749 - CVE Reference CVE-2026-109750 https://www.cve.org/CVERecord?id=CVE-2026-109750 - CVE Reference CVE-2026-109751 https://www.cve.org/CVERecord?id=CVE-2026-109751 - CVE Reference CVE-2026-109752 https://www.cve.org/CVERecord?id=CVE-2026-109752 - CVE Reference CVE-2026-109753 https://www.cve.org/CVERecord?id=CVE-2026-109753 - CVE Reference CVE-2026-109754 https://www.cve.org/CVERecord?id=CVE-2026-109754 - CVE Reference CVE-2026-109755 https://www.cve.org/CVERecord?id=CVE-2026-109755 - CVE Reference CVE-2026-109756 https://www.cve.org/CVERecord?id=CVE-2026-109756 - CVE Reference CVE-2026-109757 https://www.cve.org/CVERecord?id=CVE-2026-109757 - CVE Reference CVE-2026-109759 https://www.cve.org/CVERecord?id=CVE-2026-109759 - CVE Reference CVE-2026-109760 https://www.cve.org/CVERecord?id=CVE-2026-109760 - CVE Reference CVE-2026-109761 https://www.cve.org/CVERecord?id=CVE-2026-109761 - CVE Reference CVE-2026-109762 https://www.cve.org/CVERecord?id=CVE-2026-109762 - CVE Reference CVE-2026-109763 https://www.cve.org/CVERecord?id=CVE-2026-109763 - CVE Reference CVE-2026-109764 https://www.cve.org/CVERecord?id=CVE-2026-109764 - CVE Reference CVE-2026-109765 https://www.cve.org/CVERecord?id=CVE-2026-109765 - CVE Reference CVE-2026-109766 https://www.cve.org/CVERecord?id=CVE-2026-109766 - CVE Reference CVE-2026-109767 https://www.cve.org/CVERecord?id=CVE-2026-109767 - CVE Reference CVE-2026-109768 https://www.cve.org/CVERecord?id=CVE-2026-109768 - CVE Reference CVE-2026-109769 https://www.cve.org/CVERecord?id=CVE-2026-109769 - CVE Reference CVE-2026-109770 https://www.cve.org/CVERecord?id=CVE-2026-109770 - CVE Reference CVE-2026-109771 https://www.cve.org/CVERecord?id=CVE-2026-109771 - CVE Reference CVE-2026-109772 https://www.cve.org/CVERecord?id=CVE-2026-109772 - CVE Reference CVE-2026-109773 https://www.cve.org/CVERecord?id=CVE-2026-109773 - CVE Reference CVE-2026-109774 https://www.cve.org/CVERecord?id=CVE-2026-109774 - CVE Reference CVE-2026-109775 https://www.cve.org/CVERecord?id=CVE-2026-109775 - CVE Reference CVE-2026-109776 https://www.cve.org/CVERecord?id=CVE-2026-109776 - CVE Reference CVE-2026-109777 https://www.cve.org/CVERecord?id=CVE-2026-109777 - CVE Reference CVE-2026-109778 https://www.cve.org/CVERecord?id=CVE-2026-109778 - CVE Reference CVE-2026-109779 https://www.cve.org/CVERecord?id=CVE-2026-109779 - CVE Reference CVE-2026-109780 https://www.cve.org/CVERecord?id=CVE-2026-109780 - CVE Reference CVE-2026-109781 https://www.cve.org/CVERecord?id=CVE-2026-109781 - CVE Reference CVE-2026-109782 https://www.cve.org/CVERecord?id=CVE-2026-109782 - CVE Reference CVE-2026-109783 https://www.cve.org/CVERecord?id=CVE-2026-109783 - CVE Reference CVE-2026-110247 https://www.cve.org/CVERecord?id=CVE-2026-110247 - CVE Reference CVE-2026-110249 https://www.cve.org/CVERecord?id=CVE-2026-110249