ZeroDay Findings
Sign inSign up

Findings

CVE-2026-109783

Mitigation bypass in the File Handling component.

Published Oct 13, 2026 · updated Oct 15, 2026

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · OSV.dev

    Detected

    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.

  2. Oct 15, 2026 · OSV.dev

    Fix available

    firefox-esr fixed in 153.5.0esr-1~deb12u1; firefox-esr fixed in 153.5.0esr-1~deb13u1

  3. Oct 15, 2026 · OSV.dev

    Fix available

    firefox-esr fixed in 153.5.0esr-1~deb12u1

  4. Oct 15, 2026 · OSV.dev

    Fix available

    firefox-esr fixed in 153.5.0esr-1~deb13u1

  5. Oct 15, 2026 · OSV.dev

    Updated

    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.

Affected

  • Debian:12 firefox-esr0 → 153.5.0esr-1~deb12u1
  • Debian:13 firefox-esr0 → 153.5.0esr-1~deb13u1
  • Debian:14 firefox-esr128.13.0esr-1, 128.14.0esr-1, 128.14.0esr-1~deb11u1

Sources

References