Firefox Esr

CVEs (38)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-92073	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92047	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92043	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92017	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92015	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92014	Mozilla Corporation Firefox Esr	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41 and Firefox ESR 140.16.
CVE-2026-92013	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92012	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92011	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92010	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92009	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92008	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92007	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92006	Mozilla Corporation Firefox	Hig	0.57	8.8	—	Sep 15, 2026	Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92062	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92049	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92048	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92046	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92045	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92044	Mozilla Corporation Firefox		0.00	—	—	Sep 15, 2026	Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.

CVE-2026-92073HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92047HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92043HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92017HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92015HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92014HigSep 15, 2026
Mozilla Corporation
Firefox Esr
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41 and Firefox ESR 140.16.
CVE-2026-92013HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92012HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92011HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92010HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92009HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92008HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92007HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92006HigSep 15, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss —
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
CVE-2026-92062Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92049Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92048Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92046Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92045Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
CVE-2026-92044Sep 15, 2026
Mozilla Corporation
Firefox
risk 0.00cvss —epss —
Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.

Page 1 of 2