Paper/Archive/CVE-2026-106016

CVE-2026-106016

Mozilla Firefox — Mitigation bypass in the File Handling component

EPSS 0.3%CVSS 9.8

critical.is priorityof 100

34

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 24.8.248 × 205.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.

Affected

ProductAffectedFixed inSource

Firefoxsee advisory157.0.1CNA

Thunderbirdsee advisory158CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refbugzilla.mozilla.org/show_bug.cgi?id=2067465 refmozilla.org/security/advisories/mfsa2026-104 refmozilla.org/security/advisories/mfsa2026-109