CVE-2026-109783: Mitigation bypass in the File Handling component
Published Oct 13, 2026
·Updated
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5.
Affected Software
1 affected componentFixes available
Mozilla Firefox ESR<153.5
153.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 153.5 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 153.5
Event History
Oct 13, 2026
CVE Published
via Mozilla·12:00 AM
Data Sourced
via Mozilla·12:00 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·12:29 PM
Data Sourced
via MITRE·12:29 PM
Description
Data Sourced
via NVD·01:17 PM
Description
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-109704
- CVE-2026-109705
- CVE-2026-109706
- CVE-2026-109707
- CVE-2026-109708
- CVE-2026-109709
- CVE-2026-109710
- CVE-2026-109711
- CVE-2026-109712
- CVE-2026-109713
- CVE-2026-109715
- CVE-2026-109716
- CVE-2026-109717
- CVE-2026-109718
- CVE-2026-109719
- CVE-2026-109720
- CVE-2026-109721
- CVE-2026-109722
- CVE-2026-109723
- CVE-2026-109724
- CVE-2026-109725
- CVE-2026-109726
- CVE-2026-109727
- CVE-2026-109728
- CVE-2026-109729
- CVE-2026-109730
- CVE-2026-109731
- CVE-2026-109732
- CVE-2026-109733
- CVE-2026-109734
- CVE-2026-109736
- CVE-2026-109737
- CVE-2026-109738
- CVE-2026-109740
- CVE-2026-109741
- CVE-2026-109742
- CVE-2026-109743
- CVE-2026-109744
- CVE-2026-109745
- CVE-2026-109782
- CVE-2026-109751
- CVE-2026-109752
- CVE-2026-109753
- CVE-2026-109754
- CVE-2026-109756
- CVE-2026-109757
- CVE-2026-109759
- CVE-2026-109760
- CVE-2026-109762
- CVE-2026-109763
- CVE-2026-109764
- CVE-2026-109765
- CVE-2026-109766
- CVE-2026-109767
- CVE-2026-109783
- CVE-2026-109770
- CVE-2026-109775
- CVE-2026-109776
- CVE-2026-109777
- CVE-2026-109778
- CVE-2026-109781
Frequently Asked Questions
1
Which Firefox ESR release includes the fix?
The vulnerability was fixed in Firefox ESR 153.5.