Multiple vulnerabilities in Mozilla Firefox ESR

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Security vulnerability in DOM can be exploited to bypass security restrictions.
2. Memory safety vulnerability can be exploited to execute arbitrary code.
3. Integer overflow vulnerability in Graphics can be exploited to cause denial of service.
4. Use after free vulnerability in IPC can be exploited to cause denial of service or execute arbitrary code.

Original advisories

• MFSA2026-02

Exploitation

Public exploits exist for this vulnerability.

Related products

• Mozilla-Firefox-ESR

CVE list

• CVE-2026-0877
  critical
• CVE-2026-0879
  critical
• CVE-2026-0880
  critical
• CVE-2026-0882
  critical
• CVE-2026-0886
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com