Question 1

What is CVE-2026-109754 — CVE-2026-109754?

Accepted Answer

Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Question 2

What is the authoritative source for CVE-2026-109754?

Accepted Answer

CVE-2026-109754 (CVE-2026-109754) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.16% probability of exploitation · percentile 4.6% · 2026-10-17T12:00:28Z
Last modified	2026-10-13

CVE-2026-109754CVE-2026-109754

Description

Scoring