cbcvebase.
CVE-2026-100759
published 2026-09-29

CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17…

PriorityP342high8.1CVSS 3.1
AVNACLPRNUIRSUCHIHAN
EPSS
0.31%
22.1th percentile
Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

Affected

14 ranges
VendorProductVersion rangeFixed in
mozillafirefox< Firefox 157Firefox 157
mozillafirefox< 115.42.0115.42.0
mozillafirefox>= 116.0.0 < 140.17.0140.17.0
mozillafirefox>= 141.0.0 < 153.4.0153.4.0
mozillafirefox>= 154.0.0 < 157.0.0157.0.0
mozillafirefox_esr< Firefox ESR 140.17Firefox ESR 140.17
mozillafirefox_esr< Firefox ESR 115.42Firefox ESR 115.42
mozillafirefox_esr< Firefox ESR 153.4Firefox ESR 153.4
mozillathunderbird< Thunderbird 157Thunderbird 157
mozillathunderbird< Thunderbird 140.17Thunderbird 140.17
mozillathunderbird< Thunderbird 153.4Thunderbird 153.4
mozillathunderbird< 140.17.0140.17.0
mozillathunderbird>= 141.0 < 153.4.0153.4.0
mozillathunderbird>= 154.0 < 157.0157.0
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.