PT-2026-102605

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 140.17 Thunderbird versions prior to 153.4 Description A use-after-free issue exists in the Graphics:...

PT-2026-102555

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A sandbox escape exists in the Graphics: WebRender...

PT-2026-102556

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description Privilege escalation is possible due to incorrect boundar...

CVE-2026-100782: Improper Restriction of Operations within the Bounds of a Memory Buffer

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100786: Use After Free

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100832: Use After Free

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17...

PT-2026-102551

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A use-after-free issue exists in the Graphics: Canvas2D...

PT-2026-102560

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A use-after-free issue exists in the Graphics component,...

PT-2026-102563

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description A use-after-free issue exists in the Graphics: Canvas2D...

PT-2026-102586

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Firefox versions prior to 157 Description A denial-of-service issue exists within the Graphics component. Recommendations Update Firefox ESR to version 153.4. Update...

CVE-2026-100777: Use After Free

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100781: Improper Restriction of Operations within the Bounds of a Memory Buffer

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

CVE-2026-100789: Use After Free

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

Amazon Linux 2023 : firefox (ALAS2023-2026-3126)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3126 advisory. Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2. CVE-2026-8411...

PT-2026-102535

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Thunderbird versions prior to 157 Description A use-after-free issue exists in the Graphics: WebGPU component, which can lead to privilege escalation. Use-after-free is a memory corruption flaw that occurs when an...

PT-2026-102571

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description Privilege escalation is possible due to a use-after-free...

Mozilla Firefox ESR < 140.17

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.17. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-99 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was...

Mozilla Firefox ESR < 140.17

The version of Firefox ESR installed on the remote Windows host is prior to 140.17. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-99 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in...

Amazon Linux 2 : thunderbird (ALAS-2026-3952)

The version of thunderbird installed on the remote host is prior to 140.16.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3952 advisory. Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerabilit...

Amazon Linux 2 : firefox (ALASFIREFOX-2026-065)

The version of firefox installed on the remote host is prior to 140.16.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-065 advisory. Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 15...