Live › vulnerability › CVE-2026-113399
Go to dashboardAn incorrect boundary condition in Firefox and Thunderbird's SVG component was fixed in version 158.0.1. The sources do not say what an attacker can gain from it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run Firefox or Thunderbird builds older than 158.0.1 on their machines are affected. The sources do not say whether the flaw needs a particular page, file or setting to be triggered, so unknown for who can skip it.
No product ranges from the sources yet.
firefox --version or the About Firefox page.thunderbird --version or the About Thunderbird page.158.0.1 or later.158.0.1 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-113399")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.