Firefox Esr
CVEs (38)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-92041 | 0.00 | — | — | Sep 15, 2026 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3. | |||
| CVE-2026-92039 | 0.00 | — | — | Sep 15, 2026 | Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3. | |||
| CVE-2026-92035 | 0.00 | — | — | Sep 15, 2026 | Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3. | |||
| CVE-2026-92032 | 0.00 | — | — | Sep 15, 2026 | Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92031 | 0.00 | — | — | Sep 15, 2026 | Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92030 | 0.00 | — | — | Sep 15, 2026 | Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92029 | 0.00 | — | — | Sep 15, 2026 | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92028 | 0.00 | — | — | Sep 15, 2026 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92027 | 0.00 | — | — | Sep 15, 2026 | Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92026 | 0.00 | — | — | Sep 15, 2026 | Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92025 | 0.00 | — | — | Sep 15, 2026 | Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92024 | 0.00 | — | — | Sep 15, 2026 | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92023 | 0.00 | — | — | Sep 15, 2026 | Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92022 | 0.00 | — | — | Sep 15, 2026 | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92021 | 0.00 | — | — | Sep 15, 2026 | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16. | |||
| CVE-2026-92019 | 0.00 | — | — | Sep 15, 2026 | Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92016 | 0.00 | — | — | Sep 15, 2026 | Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3. | |||
| CVE-2026-92005 | 0.00 | — | — | Sep 15, 2026 | Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3. |
- CVE-2026-92041Sep 15, 2026risk 0.00cvss —epss —
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
- CVE-2026-92039Sep 15, 2026risk 0.00cvss —epss —
Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
- CVE-2026-92035Sep 15, 2026risk 0.00cvss —epss —
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.
- CVE-2026-92032Sep 15, 2026risk 0.00cvss —epss —
Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92031Sep 15, 2026risk 0.00cvss —epss —
Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92030Sep 15, 2026risk 0.00cvss —epss —
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92029Sep 15, 2026risk 0.00cvss —epss —
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92028Sep 15, 2026risk 0.00cvss —epss —
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92027Sep 15, 2026risk 0.00cvss —epss —
Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92026Sep 15, 2026risk 0.00cvss —epss —
Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92025Sep 15, 2026risk 0.00cvss —epss —
Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92024Sep 15, 2026risk 0.00cvss —epss —
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92023Sep 15, 2026risk 0.00cvss —epss —
Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92022Sep 15, 2026risk 0.00cvss —epss —
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92021Sep 15, 2026risk 0.00cvss —epss —
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16.
- CVE-2026-92019Sep 15, 2026risk 0.00cvss —epss —
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92016Sep 15, 2026risk 0.00cvss —epss —
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3.
- CVE-2026-92005Sep 15, 2026risk 0.00cvss —epss —
Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3.
Page 2 of 2