Multiple vulnerabilities in Mozilla Firefox ESR

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in the DOM: Networking component can be exploited remotely to execute arbitrary code.
2. Denial of service vulnerability in the Audio/Video: Playback component can be exploited remotely to cause denial of service.
3. A remote code execution vulnerability in Thunderbird ESR 140 can be exploited remotely to execute arbitrary code.

Fiches de renseignement originales

• MFSA2026-42

Exploitation

Public exploits exist for this vulnerability.

Produits associés

• Mozilla-Firefox-ESR

Liste CVE

• CVE-2026-8090
  critical
• CVE-2026-8091
  critical
• CVE-2026-8092
  critical

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com