Mozilla Firefox ESR < 115.42

The version of Firefox ESR installed on the remote Windows host is prior to 115.42. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-98 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in...

Security Vulnerabilities fixed in Firefox ESR 140.17 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...

Security Vulnerabilities fixed in Firefox ESR 115.42 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...

Security Vulnerabilities fixed in Firefox ESR 153.4 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...

Mozilla Firefox ESR < 140.17

The version of Firefox ESR installed on the remote Windows host is prior to 140.17. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-99 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in...

Mozilla Firefox ESR < 140.17

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.17. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-99 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was...

Mozilla Firefox ESR < 115.42

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.42. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-98 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was...

PT-2026-102586

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Firefox versions prior to 157 Description A denial-of-service issue exists within the Graphics component. Recommendations Update Firefox ESR to version 153.4. Update...

PT-2026-102582

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 153.4 Firefox versions prior to 157 Thunderbird versions prior to 157 Description A mitigation bypass exists within the DOM: Service Workers component. Service Workers are scripts that the browser runs in the...

PT-2026-102605

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 140.17 Thunderbird versions prior to 153.4 Description A use-after-free issue exists in the Graphics:...

PT-2026-102534

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Firefox versions prior to 157 Description A sandbox escape exists within the Security: Process Sandboxing component. A sandbox is a security mechanism used to execute...

PT-2026-102561

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A sandbox escape exists in the XUL component. A sandbox is a security mechanism for separating running programs, ensuring that code...

PT-2026-102602

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A mitigation bypass exists within the DOM Security component. Recommendations Update Firefox to version 157. Update Firefox ESR to...

KLA91305 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of service...

KLA91304 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of service...

KLA91302 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant...

Linux Distros Unpatched Vulnerability : CVE-2026-92021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16. CVE-2026-92021 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2026-92014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2026-090050)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090050 advisory. When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the functi...