Mozilla
Security Vulnerabilities fixed in Firefox 156
MFSA2026-90 Sep 15, 2026 Source: Vendor
Imported from Mozilla security advisory MFSA2026-90. Draft.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
73 lines
Showing 1–50 of 73 , page 1 of 2
CVE-2026-92005
BR2026-0000-042711
unclaimed
High: Use-after-free in the Audio/Video: Web Codecs component
Credited as devdharan9424@gmail.com
CVE-2026-92006
BR2026-0000-042712
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92007
BR2026-0000-042713
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92008
BR2026-0000-042714
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92009
BR2026-0000-042715
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92010
BR2026-0000-042716
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92011
BR2026-0000-042717
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92012
BR2026-0000-042718
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92013
BR2026-0000-042719
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92015
BR2026-0000-042720
unclaimed
High: Privilege escalation in the WebExtensions component
Credited as Quy Pham
CVE-2026-92034
BR2026-0000-042721
unclaimed
High: Site isolation issue in the Graphics component
Credited as Steven Julian
CVE-2026-92035
BR2026-0000-042722
unclaimed
High: Sandbox escape due to incorrect boundary conditions in the Graphics component
Credited as Mozilla
CVE-2026-92016
BR2026-0000-042723
unclaimed
High: Use-after-free in the Disability Access APIs component
Credited as Mozilla
CVE-2026-92017
BR2026-0000-042724
unclaimed
High: Privilege escalation in the DOM: Service Workers component
Credited as Mozilla
CVE-2026-92018
BR2026-0000-042725
unclaimed
High: Sandbox escape in the DOM: Core & HTML component
Credited as Quy Pham
CVE-2026-92020
BR2026-0000-042726
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
Credited as Rintaro Kawasugi
CVE-2026-92022
BR2026-0000-042727
unclaimed
High: Use-after-free in the DOM: HTML Parser component
Credited as Seohyeon Maeng
CVE-2026-92023
BR2026-0000-042728
unclaimed
High: Use-after-free in the XML component
Credited as Mozilla
CVE-2026-92024
BR2026-0000-042729
unclaimed
High: Use-after-free in the SVG component
Credited as Mozilla
CVE-2026-92025
BR2026-0000-042730
unclaimed
High: Use-after-free in the DOM: Navigation component
Credited as Mozilla
CVE-2026-92026
BR2026-0000-042731
unclaimed
High: Use-after-free in the Networking component
Credited as Mozilla
CVE-2026-92036
BR2026-0000-042732
unclaimed
High: Incorrect boundary conditions in the Networking: HTTP component
Credited as Mozilla
CVE-2026-92027
BR2026-0000-042733
unclaimed
High: Use-after-free in the DOM: Streams component
Credited as Mozilla
CVE-2026-92028
BR2026-0000-042734
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-92029
BR2026-0000-042735
unclaimed
High: Use-after-free in the SVG component
Credited as Mozilla
CVE-2026-92037
BR2026-0000-042736
unclaimed
High: Incorrect boundary conditions in the DOM: Animation component
Credited as Mozilla
CVE-2026-92038
BR2026-0000-042737
unclaimed
High: Mitigation bypass in the Remote Settings Client component
Credited as Mozilla
CVE-2026-92039
BR2026-0000-042738
unclaimed
Moderate: Mitigation bypass in the DOM: Notifications component
Credited as tiebuchen
CVE-2026-92040
BR2026-0000-042739
unclaimed
Moderate: Use-after-free in the JavaScript: WebAssembly component
Credited as Mozilla
CVE-2026-92041
BR2026-0000-042740
unclaimed
Moderate: Mitigation bypass in the DOM: Networking component
Credited as Atsushi Sada
CVE-2026-92033
BR2026-0000-042741
unclaimed
Moderate: Privilege escalation in Firefox for Android
Credited as Steven Julian
CVE-2026-92042
BR2026-0000-042742
unclaimed
Moderate: Race condition in the DOM: Content Processes component
Credited as Mozilla
CVE-2026-92043
BR2026-0000-042743
unclaimed
Moderate: Privilege escalation due to incorrect boundary conditions in the Audio/Video component
Credited as Mozilla
CVE-2026-92044
BR2026-0000-042744
unclaimed
Moderate: Information disclosure in the Networking: HTTP component
Credited as Gee-netics
CVE-2026-92045
BR2026-0000-042745
unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the WebRTC component
Credited as Mozilla
CVE-2026-92030
BR2026-0000-042746
unclaimed
Moderate: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component
Credited as anas cherni
CVE-2026-92046
BR2026-0000-042747
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-92047
BR2026-0000-042748
unclaimed
Moderate: Privilege escalation in the Crash Reporting component
Credited as Mozilla
CVE-2026-92048
BR2026-0000-042749
unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Credited as Mozilla
CVE-2026-92049
BR2026-0000-042750
unclaimed
Moderate: Use-after-free in the Widget: Win32 component
Credited as Mozilla
CVE-2026-92050
BR2026-0000-042751
unclaimed
Moderate: Sandbox escape due to race condition in the XPConnect component
Credited as Mozilla
CVE-2026-92051
BR2026-0000-042752
unclaimed
Moderate: Spoofing issue due to invalid pointer in the Graphics component
Credited as Mozilla
CVE-2026-92052
BR2026-0000-042753
unclaimed
Moderate: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92053
BR2026-0000-042754
unclaimed
Moderate: Privilege escalation in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92054
BR2026-0000-042755
unclaimed
Moderate: Privilege escalation in the Memory component
Credited as Amy Burnett of OpenAI
CVE-2026-92055
BR2026-0000-042756
unclaimed
Moderate: Privilege escalation in the DevTools component
Credited as Finn Westendorf
CVE-2026-92056
BR2026-0000-042757
unclaimed
Moderate: Use-after-free in the Graphics: Text component
Credited as r00tdaddy
CVE-2026-92019
BR2026-0000-042758
unclaimed
Moderate: Mitigation bypass in the Remote Settings Client component
Credited as Shu Takahashi
CVE-2026-92057
BR2026-0000-042759
unclaimed
Moderate: Mitigation bypass in the Enterprise Policies component
Credited as Shu Takahashi
CVE-2026-92031
BR2026-0000-042760
unclaimed
Moderate: Information disclosure in the Graphics: ImageLib component
Credited as Qi Qin