Question 1

What is CVE-2026-109731 — CVE-2026-109731?

Accepted Answer

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Question 2

What is the authoritative source for CVE-2026-109731?

Accepted Answer

CVE-2026-109731 (CVE-2026-109731) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.16% probability of exploitation · percentile 4.6% · 2026-10-17T12:00:28Z
Last modified	2026-10-13

CVE-2026-109731CVE-2026-109731

Description

Scoring