Multiple vulnerabilities in Mozilla Firefox ESR

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in the DOM: Core & HTML component can be exploited remotely to execute arbitrary code.
2. Information disclosure vulnerability in the Graphics: Canvas2D component can be exploited to obtain sensitive information.
3. Security vulnerability in the Graphics: WebRender component can be exploited to bypass security restrictions.
4. Denial of service vulnerability in the WebRTC component can be exploited remotely to cause denial of service.
5. A remote code execution vulnerability in the JavaScript Engine component can be exploited remotely to execute arbitrary code.
6. Security vulnerability can be exploited to bypass security restrictions.
7. Security UI vulnerability in the DOM: Core & HTML component can be exploited to spoof user interface.
8. Denial of service vulnerability in the Libraries component in NSS can be exploited remotely to cause denial of service.
9. A remote code execution vulnerability in Firefox ESR 115 can be exploited remotely to execute arbitrary code.

Original advisories

• MFSA2026-31

Exploitation

Related products

• Mozilla-Firefox-ESR

CVE list

• CVE-2026-2781
  critical
• CVE-2026-6746
  critical
• CVE-2026-6749
  critical
• CVE-2026-6750
  critical
• CVE-2026-6752
  high
• CVE-2026-6754
  critical
• CVE-2026-6762
  unknown
• CVE-2026-6767
  high
• CVE-2026-6772
  critical
• CVE-2026-6785
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com