Main Vulnerability Database Vulnerabilities #VU156056

Input validation error in Mozilla Firefox and Firefox for Android - CVE-2026-109714

Published: October 16, 2026

Vulnerability identifier: #VU156056

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-109714

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to disrupt layout processing and potentially cause a denial of service.

The vulnerability exists due to incorrect boundary handling in the Layout component when processing document layout. A remote attacker can supply content that exercises improperly handled boundary conditions to cause processing errors and potentially crash the browser.

Affected software

Mozilla Firefox
Firefox for Android

How to mitigate CVE-2026-109714

Install security update from vendor's website.

Mozilla Firefox - update to 158.0
Firefox for Android - update to 158.0

External References

Related Security Bulletins