mozilla firefox CVE-2026-118002 vulnerability in Mozilla Products
Published on October 27, 2026

Information disclosure due to race condition in the Networking component

product logo product logo
Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

NVD

Vulnerability Analysis

CVE-2026-118002 is exploitable with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
NONE

Weakness Type

What is an Information Disclosure Vulnerability?

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVE-2026-118002 has been classified to as an Information Disclosure vulnerability or weakness.


Products Associated with CVE-2026-118002

stack.watch emails you whenever new vulnerabilities are published in Mozilla Firefox or Mozilla Thunderbird. Just hit a watch button to start following.

 
 

Affected Versions

Mozilla Firefox: Mozilla Thunderbird: