high · CVSS v3 5.4

CVE-2026-113470

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to…

Description

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is disabled by policy or otherwise unavailable in the user's network environment. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, and Firefox ESR 115.43.1.

Scores

Severity
high
CVSS v2
7.5
CVSS v3
5.4
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

high

CVE-2026-43839

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.

View analysis

high

CVE-2026-43840

A NULL pointer dereference in the license manager service’s on_disconnected callback can crash the service. The flaw is exploitable by unauthenticated users. It can cause a denial of service to the affected system.

View analysis

high

CVE-2026-43841

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.

View analysis

high

CVE-2026-43842

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.

View analysis