CVE-2026-100811
critical · 9.6Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.
9.6
CVSS
—
EPSS (exploit prob.)
—
EPSS percentile
2026-09-29
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-416
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-100811