Multiple vulnerabilities in Mozilla Firefox ESR

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. Memory safety bug fixed in Firefox 152
2. A remote code execution vulnerability in Firefox ESR 140 can be exploited remotely to execute arbitrary code.
3. Memory safety bug fixed in Thunderbird
4. Security vulnerability in the Security: Process Sandboxing component can be exploited to bypass security restrictions.
5. Security vulnerability in the Networking: Cookies component can be exploited to bypass security restrictions.
6. Security vulnerability in the DOM: Security component can be exploited to bypass security restrictions.
7. Denial of service vulnerability in the Graphics: CanvasWebGL component can be exploited remotely to cause denial of service.
8. Denial of service vulnerability in the Web Audio component can be exploited remotely to cause denial of service.

Fiches de renseignement originales

• MFSA2026-58

Produits associés

• Mozilla-Firefox-ESR

Liste CVE

• CVE-2026-12292
  critical
• CVE-2026-12296
  critical
• CVE-2026-12298
  critical
• CVE-2026-12304
  critical
• CVE-2026-12305
  critical
• CVE-2026-12306
  high
• CVE-2026-12307
  high
• CVE-2026-12308
  high
• CVE-2026-12309
  high
• CVE-2026-12310
  critical
• CVE-2026-12311
  warning
• CVE-2026-12312
  critical
• CVE-2026-12313
  warning
• CVE-2026-12314
  critical
• CVE-2026-12315
  critical
• CVE-2026-12324
  high
• CVE-2026-12327
  critical
• CVE-2026-12329
  critical

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com