CVE-2026-113470

LOWCVSS 5.4 · MEDIUM

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://bugzilla.mozilla.org/show_bug.cgi?id=2084311
https://www.mozilla.org/security/advisories/mfsa2026-111/
https://www.mozilla.org/security/advisories/mfsa2026-112/
https://www.mozilla.org/security/advisories/mfsa2026-113/
https://www.mozilla.org/security/advisories/mfsa2026-114/

Weakness type (CWE)

CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

Zaven@z4v3n1d
@astuyve Thought we'd see more CVEs but I guess not all the vendors issue them in this case CVE-2026-111943 (Go) is cited by the Go team, but https://CVE.org, NVD and https://vuln.go.dev have no record yet. CVE-2026-113470 (Firefox) confirm by Mozilla advisory MFSA2026-111.
000501.4K
243 followersView on X

Explore more

Back to dashboard