CVE-2026-109731

The Graphics: Canvas2D component in Mozilla Firefox and Thunderbird is affected by incorrect boundary conditions , as identified in CVE-2026-109731 . This flaw could potentially lead to arbitrary code execution , sandbox escape , information disclosure , mitigation bypass , or privilege escalatio...

CVE-2026-109731 Incorrect boundary conditions in the Graphics: Canvas2D component

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109731

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109711 Use-after-free in the Graphics: Canvas2D component

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98487

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109711

A use-after-free vulnerability exists in the Graphics: Canvas2D component of the Firefox browser. This flaw has a high impact. The vulnerability was addressed in Firefox 158 and Firefox ESR 153.5 . No specific exploit details or exploit links are provided in the documentation.

CVE-2026-109711

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109730

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109730

The Graphics component in Mozilla Firefox and Thunderbird is vulnerable to an integer overflow (CWE-190). This vulnerability could potentially lead to arbitrary code execution , sandbox escape , information disclosure , mitigation bypass , or privilege escalation . This issue has been addressed i...

CVE-2026-109730 Integer overflow in the Graphics component

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98648

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109719 Race condition, use-after-free in the Graphics: CanvasWebGL component

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, and Firefox ESR 153.5...

CVE-2026-109719

A race condition and use-after-free vulnerability exists in the Graphics: CanvasWebGL component of Firefox and Thunderbird . This security flaw, reported by Shu Takahashi of Velcore Consulting Inc., was addressed in the following versions: Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153.5 , Th...

CVE-2026-109719 Race condition, use-after-free in the Graphics: CanvasWebGL component

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-98641

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109719

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109712

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109712 Sandbox escape due to uninitialized memory in the Graphics component

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109712

The Mozilla Firefox web browser and Thunderbird email client are affected by a sandbox escape vulnerability. The root cause is uninitialized memory within the Graphics component . This security issue has been remediated in the following versions: Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153...

EUVD-2026-98637

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...