medium5.4
CVE-2026-113470
Cryptographic issue in the Security Block-lists, Allow-lists, and other State component.
Impact
Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.mozilla.org/show_bug.cgi?id=2084311
- https://www.mozilla.org/security/advisories/mfsa2026-111/
- https://www.mozilla.org/security/advisories/mfsa2026-112/
- https://www.mozilla.org/security/advisories/mfsa2026-113/
- https://www.mozilla.org/security/advisories/mfsa2026-114/
- https://www.mozilla.org/security/advisories/mfsa2026-115/
- https://www.mozilla.org/security/advisories/mfsa2026-116/
- http://www.openwall.com/lists/oss-security/2026/10/20/30
- https://lists.debian.org/debian-lts-announce/2026/10/msg00041.html