Multiple vulnerabilities in Mozilla Firefox ESR

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Security vulnerability in the Remote Settings Client component can be exploited to bypass security restrictions.
2. A remote code execution vulnerability in the DOM: Navigation component can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in the Audio/Video component can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in the DOM: Security component can be exploited remotely to execute arbitrary code.
5. Denial of service vulnerability in the Graphics component can be exploited remotely to cause denial of service.
6. Security vulnerability can be exploited to bypass security restrictions.

Original advisories

• MFSA2026-83

Exploitation

Related products

• Mozilla-Firefox-ESR

CVE list

• CVE-2026-75874
  critical
• CVE-2026-84119
  critical
• CVE-2026-84120
  high
• CVE-2026-84121
  critical
• CVE-2026-84131
  critical
• CVE-2026-84145
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com