# CERT-FR Advisory: Multiple Mozilla Vulnerabilities Patched

Published: 2026-10-21 · Severity: routine
Canonical: https://vorant.io/reports/a16a3a06-c09d-512f-a47e-a9d10cbf78e3/cert-fr-advisory-multiple-mozilla-vulnerabilities-patched

> CERT-FR advises patching multiple Firefox and Thunderbird vulnerabilities that could allow arbitrary code execution, data disclosure, or denial of service.

CERT-FR has published an advisory covering multiple vulnerabilities disclosed by Mozilla across Firefox, Firefox ESR, and Thunderbird. The flaws, detailed in Mozilla security bulletins mfsa2026-111 through mfsa2026-115 (dated October 20, 2026), affect Firefox ESR versions prior to 115.43.1 and 153.5.1, Firefox versions prior to 158.0.1, and Thunderbird versions prior to 153.5.1 and 158.0.1. Eight CVEs are referenced in the advisory (CVE-2026-113399, -113400, -113401, -113470, -113866, -113867, -113868, -113869).

According to the advisory, successful exploitation of these vulnerabilities could allow an attacker to achieve arbitrary code execution, compromise data confidentiality, or cause a denial of service; some impacts are not further specified by the vendor. No exploitation in the wild is mentioned in the advisory. Defenders should update affected Firefox and Thunderbird installations to the fixed versions referenced above, consulting Mozilla's official bulletins for per-CVE technical details and patch guidance.

This is a routine vendor patch advisory relayed by CERT-FR; no specific threat actor, campaign, or active exploitation is referenced. Organizations running the affected Mozilla products should prioritize patching per standard vulnerability management processes.

## Mentioned in this report

- Vulnerabilities: CVE-2026-113399, CVE-2026-113400, CVE-2026-113401, CVE-2026-113470, CVE-2026-113866, CVE-2026-113867, CVE-2026-113868, CVE-2026-113869

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1346

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/a16a3a06-c09d-512f-a47e-a9d10cbf78e3/cert-fr-advisory-multiple-mozilla-vulnerabilities-patched.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup