BugRater
Early access. This site has moved to bugrater.com.

Security releases

Mozilla

Security Vulnerabilities fixed in Firefox ESR 140.17

MFSA2026-99 Sep 29, 2026 Source: Vendor

Imported from Mozilla security advisory MFSA2026-99. Draft.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2026-99/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

43 lines
All 43 CVEs 43 Additional recognition 0 Unclaimed only
Showing 1–43 of 43
CVE-2026-100756 BR2026-0000-019504 unclaimed
High: Incorrect boundary conditions in the Audio/Video: Playback component
Credited as Mozilla
CVE-2026-100757 BR2026-0000-019505 unclaimed
High: Use-after-free in the Widget component
Credited as Mohamed Mbarek
CVE-2026-100758 BR2026-0000-019506 unclaimed
High: Sandbox escape in the DOM: Navigation component
Credited as Mozilla
CVE-2026-100759 BR2026-0000-019507 unclaimed
High: Uninitialized memory in the Storage: Quota Manager component
Credited as Mozilla
CVE-2026-100762 BR2026-0000-019508 unclaimed
High: Sandbox escape due to use-after-free in the DOM: Content Processes component
Credited as Yaqoub Aldurayhim
CVE-2026-92035 BR2026-0000-019509 unclaimed
High: Sandbox escape due to incorrect boundary conditions in the Graphics component
Credited as Mozilla
CVE-2026-100766 BR2026-0000-019510 unclaimed
High: Information disclosure in the Networking: JAR component
Credited as Mozilla
CVE-2026-100767 BR2026-0000-019511 unclaimed
High: Use-after-free in the Networking: Cache component
Credited as Mozilla
CVE-2026-100769 BR2026-0000-019512 unclaimed
High: Use-after-free in the JavaScript: WebAssembly component
Credited as Tomer Fichman
CVE-2026-100770 BR2026-0000-019513 unclaimed
High: Sandbox escape due to use-after-free in the DOM: Content Processes component
Credited as Mozilla
CVE-2026-100771 BR2026-0000-019514 unclaimed
High: Undefined behavior in the DOM: Streams component
Credited as Mozilla
CVE-2026-100772 BR2026-0000-019515 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-100773 BR2026-0000-019516 unclaimed
High: Use-after-free in the Storage: IndexedDB component
Credited as Mozilla
CVE-2026-100774 BR2026-0000-019517 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-100775 BR2026-0000-019518 unclaimed
High: Sandbox escape in the Graphics component
Credited as Mozilla
CVE-2026-100776 BR2026-0000-019519 unclaimed
High: Use-after-free in the JavaScript: WebAssembly component
Credited as Mozilla
CVE-2026-100777 BR2026-0000-019520 unclaimed
High: Use-after-free in the Graphics: Canvas2D component
Credited as Mozilla
CVE-2026-100778 BR2026-0000-019521 unclaimed
High: Sandbox escape due to use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-100779 BR2026-0000-019522 unclaimed
High: Use-after-free in the XSLT component
Credited as Mozilla
CVE-2026-100780 BR2026-0000-019523 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-100781 BR2026-0000-019524 unclaimed
High: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-100782 BR2026-0000-019525 unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics component
Credited as Mozilla
CVE-2026-100783 BR2026-0000-019526 unclaimed
High: Uninitialized memory in the Audio/Video component
Credited as 5up3rh3i
CVE-2026-100784 BR2026-0000-019527 unclaimed
High: Use-after-free in the Layout: Text and Fonts component
Credited as 5up3rh3i
CVE-2026-100785 BR2026-0000-019528 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-100786 BR2026-0000-019529 unclaimed
High: Sandbox escape due to use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-100788 BR2026-0000-019530 unclaimed
High: Invalid pointer in the JavaScript: WebAssembly component
Credited as Mozilla
CVE-2026-100789 BR2026-0000-019531 unclaimed
High: Use-after-free in the Graphics: Canvas2D component
Credited as Mozilla
CVE-2026-100790 BR2026-0000-019532 unclaimed
High: Use-after-free in the XSLT component
Credited as Mozilla
CVE-2026-100791 BR2026-0000-019533 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-100832 BR2026-0000-019534 unclaimed
High: Use-after-free in the Graphics: Canvas2D component
Credited as Mozilla
CVE-2026-100792 BR2026-0000-019535 unclaimed
High: JIT miscompilation in the JavaScript: WebAssembly component
Credited as Amy Burnett of OpenAI
CVE-2026-100794 BR2026-0000-019536 unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Internationalization component
Credited as Mozilla
CVE-2026-96869 BR2026-0000-019537 unclaimed
Moderate: Information disclosure in the Networking component
Credited as Carlo Di Dato
CVE-2026-100797 BR2026-0000-019538 unclaimed
Moderate: Privilege escalation due to use-after-free in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-100801 BR2026-0000-019539 unclaimed
Moderate: Privilege escalation in the DLL Services component
Credited as Mozilla
CVE-2026-100803 BR2026-0000-019540 unclaimed
Moderate: Same-origin policy bypass in the WebExtensions component
Credited as Yaqoub Aldurayhim
CVE-2026-100807 BR2026-0000-019541 unclaimed
Moderate: Privilege escalation in the DOM: Service Workers component
Credited as Khanh Nguyen
CVE-2026-100811 BR2026-0000-019542 unclaimed
Moderate: Sandbox escape due to use-after-free in the DOM: Core & HTML component
Credited as Yaqoub Aldurayhim
CVE-2026-100818 BR2026-0000-019543 unclaimed
Moderate: Sandbox escape due to use-after-free in the Widget: Gtk component
Credited as Mozilla
CVE-2026-100819 BR2026-0000-019544 unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the XPCOM component
Credited as Mozilla
CVE-2026-100820 BR2026-0000-019545 unclaimed
Moderate: Privilege escalation in the Address Bar component
Credited as Tran Quac
CVE-2026-100821 BR2026-0000-019546 unclaimed
Moderate: Site isolation issue in the Panning and Zooming component
Credited as Nguyen Thanh Nguyen