Multiple vulnerabilities in Mozilla Firefox ESR

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in the DOM: Core & HTML component can be exploited remotely to execute arbitrary code.
2. Information disclosure vulnerability in the Graphics: Canvas2D component can be exploited to obtain sensitive information.
3. Security vulnerability in the Graphics: WebRender component can be exploited to bypass security restrictions.
4. Denial of service vulnerability in the WebRTC component can be exploited remotely to cause denial of service.
5. A remote code execution vulnerability in the JavaScript Engine component can be exploited remotely to execute arbitrary code.
6. Security vulnerability can be exploited to bypass security restrictions.
7. Security UI vulnerability in the DOM: Core & HTML component can be exploited to spoof user interface.
8. Denial of service vulnerability in the Libraries component in NSS can be exploited remotely to cause denial of service.
9. A remote code execution vulnerability in Firefox ESR 115 can be exploited remotely to execute arbitrary code.

Fiches de renseignement originales

• MFSA2026-31

Produits associés

• Mozilla-Firefox-ESR

Liste CVE

• CVE-2026-2781
  critical
• CVE-2026-6746
  critical
• CVE-2026-6749
  critical
• CVE-2026-6750
  critical
• CVE-2026-6752
  high
• CVE-2026-6754
  critical
• CVE-2026-6762
  unknown
• CVE-2026-6767
  high
• CVE-2026-6772
  critical
• CVE-2026-6785
  unknown

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com