Vulnerability Description
Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=2084311
- https://www.mozilla.org/security/advisories/mfsa2026-111/
- https://www.mozilla.org/security/advisories/mfsa2026-112/
- https://www.mozilla.org/security/advisories/mfsa2026-113/
- https://www.mozilla.org/security/advisories/mfsa2026-114/
- https://www.mozilla.org/security/advisories/mfsa2026-115/
- https://www.mozilla.org/security/advisories/mfsa2026-116/
- http://www.openwall.com/lists/oss-security/2026/10/20/30
- https://lists.debian.org/debian-lts-announce/2026/10/msg00041.html
FAQ
What is CVE-2026-113470?
CVE-2026-113470 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1...
How severe is CVE-2026-113470?
CVE-2026-113470 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-113470?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.