Incorrect boundary conditions in the DOM: Editor component
Published Sep 15, 2026
9.3
CRITICALCVSS 3.1
EPSS 0.12%
Description
Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
Affected products
No data.
- < 153.3.0
- ≥ 154.0.0 · < 156.0.0
- < 153.3.0
- ≥ 154.0 · < 156.0
No data.
Red Hat Enterprise Linux 10
firefox
Not affected
Red Hat Enterprise Linux 10
rhel10/firefox-flatpak
Not affected
Red Hat Enterprise Linux 10
rhel10/thunderbird-flatpak
Not affected
Red Hat Enterprise Linux 10
thunderbird
Not affected
Red Hat Enterprise Linux 6
firefox
Not affected
Red Hat Enterprise Linux 6
thunderbird
Not affected
Red Hat Enterprise Linux 7
firefox
Not affected
Red Hat Enterprise Linux 7
thunderbird
Not affected
Red Hat Enterprise Linux 8
firefox
Not affected
Red Hat Enterprise Linux 8
thunderbird
Not affected
Red Hat Enterprise Linux 9
firefox
Not affected
Red Hat Enterprise Linux 9
thunderbird
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 10 | rhel10/firefox-flatpak | Not affected | n/a |
| Red Hat Enterprise Linux 10 | rhel10/thunderbird-flatpak | Not affected | n/a |
| Red Hat Enterprise Linux 10 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 6 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 7 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 8 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 8 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 9 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 9 | thunderbird | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
References (11)
- https://access.redhat.com/security/cve/CVE-2026-92059 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=2068442
- https://bugzilla.redhat.com/show_bug.cgi?id=2533734 Issue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2026-92059
- https://www.cve.org/CVERecord?id=CVE-2026-92059
- https://www.mozilla.org/security/advisories/mfsa2026-90/
- https://www.mozilla.org/security/advisories/mfsa2026-90/#CVE-2026-92059
- https://www.mozilla.org/security/advisories/mfsa2026-93/
- https://www.mozilla.org/security/advisories/mfsa2026-94/
- https://www.mozilla.org/security/advisories/mfsa2026-94/#CVE-2026-92059
- https://www.mozilla.org/security/advisories/mfsa2026-96/
Change history (0)
No recorded changes yet.