CVE-2026-106016
published 2026-10-06CVE-2026-106016: Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.
PriorityP351critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.32%
24.6th percentile
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | < Firefox 157.0.1 | Firefox 157.0.1 |
| mozilla | firefox | < 157.0.1 | 157.0.1 |
| mozilla | thunderbird | < Thunderbird 158 | Thunderbird 158 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Mitigation bypass in the File Handling component.
ghsa_unreviewed·2026-10-06
CVE-2026-106016 Mitigation bypass in the File Handling component.
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1.
Mozilla
Mozilla Foundation Security Advisory 2026-109: CVE-2026-106016
vendor_mozilla·CVSS 9.8
CVE-2026-106016 [CRITICAL] Mozilla Foundation Security Advisory 2026-109: CVE-2026-106016
Mozilla Foundation Security Advisory 2026-109
CVE: CVE-2026-106016
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 158
Mozilla
Mozilla Foundation Security Advisory 2026-104: CVE-2026-106016
vendor_mozilla
CVE-2026-106016 Mozilla Foundation Security Advisory 2026-104: CVE-2026-106016
Mozilla Foundation Security Advisory 2026-104
CVE: CVE-2026-106016
Product: Firefox
Impact: moderate
Fixed in: Firefox 157.0.1
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-06
Published