CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial comp ...

Severity: Critical

CVSS Score: 9.6

Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.