Threats Tagged 'ghsa-9m3c-9jr3-3cgr'

CVE-2026-100803 is a high-severity vulnerability in Mozilla Firefox involving a same-origin policy bypass in the WebExtensions component. This flaw allows an attacker to bypass security restrictions that normally prevent web content from accessing data from other origins. The issue has been fixed in multiple Mozilla products including Firefox ESR 153.4, Firefox 157, Thunderbird 140.17, 153.4, and 157, as well as Firefox ESR 115.42 and 140.17.