Kaspersky ID:
KLA90835
Detect Date:
01/13/2026
Updated:
01/15/2026

Description

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

  1. Denial of service vulnerability can be exploited remotely to cause denial of service.
  2. Security vulnerability in DOM can be exploited to bypass security restrictions.
  3. Memory safety vulnerability can be exploited to execute arbitrary code.
  4. Information disclosure vulnerability in XML can be exploited to obtain sensitive information.
  5. Use after free vulnerability in GC can be exploited to cause denial of service or execute arbitrary code.
  6. Use after free vulnerability in JavaScript Engine can be exploited to cause denial of service or execute arbitrary code.
  7. Information disclosure vulnerability in Networking for Windows can be exploited to obtain sensitive information.
  8. Integer overflow vulnerability in Graphics can be exploited to cause denial of service.
  9. Security UI vulnerability in Copy & Paste and Drag & Drop can be exploited to spoof user interface.
  10. Use after free vulnerability in IPC can be exploited to cause denial of service or execute arbitrary code.

Original advisories

Related products

CVE list

  • CVE-2026-0877
    critical
  • CVE-2026-0878
    critical
  • CVE-2026-0879
    critical
  • CVE-2026-0880
    critical
  • CVE-2026-0881
    critical
  • CVE-2026-0882
    critical
  • CVE-2026-0883
    high
  • CVE-2026-0884
    critical
  • CVE-2026-0885
    high
  • CVE-2026-0886
    high
  • CVE-2026-0887
    warning
  • CVE-2026-0888
    high
  • CVE-2026-0889
    critical
  • CVE-2026-0890
    high
  • CVE-2026-0891
    critical
  • CVE-2026-0892
    critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.