Mozilla
Security Vulnerabilities fixed in Firefox ESR 115.41
MFSA2026-91 Sep 15, 2026 Source: Vendor
Imported from Mozilla security advisory MFSA2026-91. Draft.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-91/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
21 lines
Showing 1–21 of 21
CVE-2026-92006
BR2026-0000-042101
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92007
BR2026-0000-042102
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92008
BR2026-0000-042103
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92009
BR2026-0000-042104
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92010
BR2026-0000-042105
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92011
BR2026-0000-042106
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92012
BR2026-0000-042107
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92013
BR2026-0000-042108
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-92014
BR2026-0000-042109
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics component
Credited as Jacolon Walker
CVE-2026-92015
BR2026-0000-042110
unclaimed
High: Privilege escalation in the WebExtensions component
Credited as Quy Pham
CVE-2026-92017
BR2026-0000-042111
unclaimed
High: Privilege escalation in the DOM: Service Workers component
Credited as Mozilla
CVE-2026-92018
BR2026-0000-042112
unclaimed
High: Sandbox escape in the DOM: Core & HTML component
Credited as Quy Pham
CVE-2026-92020
BR2026-0000-042113
unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
Credited as Rintaro Kawasugi
CVE-2026-92022
BR2026-0000-042114
unclaimed
High: Use-after-free in the DOM: HTML Parser component
Credited as Seohyeon Maeng
CVE-2026-92023
BR2026-0000-042115
unclaimed
High: Use-after-free in the XML component
Credited as Mozilla
CVE-2026-92024
BR2026-0000-042116
unclaimed
High: Use-after-free in the SVG component
Credited as Mozilla
CVE-2026-92025
BR2026-0000-042117
unclaimed
High: Use-after-free in the DOM: Navigation component
Credited as Mozilla
CVE-2026-92027
BR2026-0000-042118
unclaimed
High: Use-after-free in the DOM: Streams component
Credited as Mozilla
CVE-2026-92028
BR2026-0000-042119
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-92029
BR2026-0000-042120
unclaimed
High: Use-after-free in the SVG component
Credited as Mozilla
CVE-2026-92019
BR2026-0000-042121
unclaimed
Moderate: Mitigation bypass in the Remote Settings Client component
Credited as Shu Takahashi