Red Hat Security Advisory

RHSA-2026:89757

firefox security, bug fix, and enhancement update

Released 2026-10-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) firefox-153.5.0-1.el9_8, firefox-x11-153.5.0-1.el9_8

Fixes 48 records

TI-2026-71856 CVE-2026-109707 · GHSA-jqm6-q6j2-85mx

Sandbox escape from use-after-free in Mozilla Firefox Networking

MEDIUM 43

Sandbox escape due to use-after-free in the Networking component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00325 Published 2026-10-13 Partial fix · 115.44, 153.5 +1 CWE-416

TI-2026-71854 CVE-2026-109705 · GHSA-mjw9-3pg2-vh5w

Sandbox escape and use-after-free in Mozilla Firefox and Thunderbird

MEDIUM 43

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00325 Published 2026-10-13 Partial fix · 115.44, 153.5 +1 CWE-416

TI-2026-71668 CVE-2026-109745 · GHSA-fhx5-x7g9-94qv

Sandbox escape due to uninitialized memory in the DOM: Web Serial component

MEDIUM 43

Sandbox escape due to uninitialized memory in the DOM: Web Serial component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00349 Published 2026-10-13 Partial fix · 153.5, 158 CWE-908

TI-2026-71665 CVE-2026-109740 · GHSA-rp57-hr33-wfgr

Sandbox escape in Mozilla Firefox and Thunderbird Win32 widget

MEDIUM 43

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00349 Published 2026-10-13 Partial fix · 153.5, 158 CWE-119

TI-2026-71649 CVE-2026-109708 · GHSA-589f-33q5-grw7

Sandbox escape in Mozilla Firefox and Thunderbird networking

MEDIUM 43

Sandbox escape due to incorrect boundary conditions in the Networking component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00334 Published 2026-10-13 Partial fix · 115.44, 153.5 +1 CWE-119

TI-2026-71879 CVE-2026-109756 · GHSA-v84p-57jx-848f

Privilege escalation in Firefox and Thunderbird DOM navigation

MEDIUM 40

Privilege escalation in the DOM: Navigation component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00323 Published 2026-10-13 Partial fix · 153.5, 158 CWE-269

TI-2026-71857 CVE-2026-109709 · GHSA-c4mq-cc7v-mw2m

Information disclosure in Mozilla Firefox and Thunderbird sandboxing

MEDIUM 40

Information disclosure, privilege escalation in the Security: Process Sandboxing component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00326 Published 2026-10-13 Partial fix · 153.5, 158 CWE-200

TI-2026-71678 CVE-2026-109762 · GHSA-78gq-6664-43hv

Incorrect boundary conditions in SVG component of Firefox and Thunderbird

MEDIUM 40

Incorrect boundary conditions in the SVG component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00349 Published 2026-10-13 Partial fix · 153.5, 158 CWE-119

TI-2026-71666 CVE-2026-109743 · GHSA-hxfr-4x3m-fvx6

Privilege escalation in Mozilla Firefox and Thunderbird

MEDIUM 40

Privilege escalation in the Panning and Zooming component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00351 Published 2026-10-13 Partial fix · 153.5, 158 CWE-269

TI-2026-71658 CVE-2026-109730 · GHSA-h2w2-cc3v-p4vg

Integer overflow in Graphics of Mozilla Firefox and Thunderbird

MEDIUM 40

Integer overflow in the Graphics component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00365 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-190

TI-2026-71648 CVE-2026-109704 · GHSA-2rfh-6j5m-8mfw

Privilege escalation in Firefox and Thunderbird Application Update

MEDIUM 40

Privilege escalation in the Application Update component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2026-10-13 Partial fix · 153.5, 158 CWE-269

TI-2026-71687 CVE-2026-109782 · GHSA-77rq-hw97-qcw2

Mitigation bypass in the File Handling component

LOW 38

Mitigation bypass in the File Handling component.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00273 Published 2026-10-13 Partial fix · 153.5 CWE-693

TI-2026-71675 CVE-2026-109757 · GHSA-mgh3-qw5r-mj83

Sandbox escape via race condition in Mozilla Firefox Networking

LOW 38

Sandbox escape due to race condition in the Networking component.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00258 Published 2026-10-13 Partial fix · 153.5, 158 CWE-362

TI-2026-71660 CVE-2026-109733 · GHSA-2vmg-xgp8-g6qp

Type confusion in Mozilla Firefox

LOW 38

JIT miscompilation in the JavaScript Engine: JIT component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00462 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-843

TI-2026-71677 CVE-2026-109760 · GHSA-9gf4-8ggc-ff46

Mitigation bypass in Mozilla Firefox and Thunderbird networking

LOW 37

Mitigation bypass in the Networking: HTTP component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0034 Published 2026-10-13 Partial fix · 153.5, 158 CWE-693

TI-2026-71673 CVE-2026-109754 · GHSA-hwg9-m95f-f2gr

Incorrect boundary conditions in Firefox and Thunderbird DOM Editor

LOW 37

Incorrect boundary conditions in the DOM: Editor component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00324 Published 2026-10-13 Partial fix · 153.5, 158 CWE-119

TI-2026-71672 CVE-2026-109753 · GHSA-qrr3-f9g6-cf9g

Memory corruption in Mozilla Firefox

LOW 37

Incorrect boundary conditions in the Layout component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00343 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-119

TI-2026-71667 CVE-2026-109744 · GHSA-5322-hggj-fqwc

Cross-site scripting in Mozilla Firefox and Thunderbird DOM File

LOW 37

Other issue in the DOM: File component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00324 Published 2026-10-13 Partial fix · 153.5, 158 CWE-79

TI-2026-71663 CVE-2026-109737 · GHSA-p48j-fwqm-22jm

Mitigation bypass in Mozilla Firefox and Thunderbird

LOW 37

Mitigation bypass in the Enterprise Policies component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0034 Published 2026-10-13 Partial fix · 153.5, 158 CWE-693

TI-2026-71662 CVE-2026-109736 · GHSA-4hp2-r6fq-j3w8

Frame poisoning in the Layout component of Firefox and Thunderbird

LOW 37

Frame poisoning in the Layout component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00324 Published 2026-10-13 Partial fix · 153.5, 158 CWE-451

TI-2026-71656 CVE-2026-109722 · GHSA-595g-xpmf-vrxq

JIT miscompilation in the Firefox JavaScript engine

LOW 37

JIT miscompilation in the JavaScript Engine: JIT component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00314 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-670

TI-2026-71653 CVE-2026-109716 · GHSA-j4g4-pvfp-4qg5

Incorrect boundary checks in Firefox JavaScript Engine

LOW 37

Incorrect boundary conditions in the JavaScript Engine component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00314 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-119

TI-2026-71676 CVE-2026-109759 · GHSA-pm32-3w7w-7973

Site isolation flaw in Mozilla Firefox and Thunderbird networking

LOW 36

Site isolation issue in the Networking component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00178 Published 2026-10-13 Partial fix · 153.5, 158 CWE-346

TI-2026-71652 CVE-2026-109715 · GHSA-m8f5-fc69-f3j6

Firefox and Thunderbird JavaScript Engine Memory Buffer Boundary Flaw

LOW 35

Incorrect boundary conditions in the JavaScript Engine component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00314 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-119

TI-2026-33006 CVE-2026-45186 · GHSA-r396-2q2c-pjhr

In libexpat before 2.8.1, the computational complexity of attribute name collision checks…

LOW 33

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00479 Published 2026-05-10 Partial fix · 2.8.1 CWE-407

TI-2026-71654 CVE-2026-109720 · GHSA-5r38-4r4j-9hg3

JIT miscompilation in Mozilla Firefox and Thunderbird WebAssembly

LOW 31

JIT miscompilation in the JavaScript: WebAssembly component.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00264 Published 2026-10-13 Partial fix · 153.5, 158 CWE-843

TI-2026-71650 CVE-2026-109712 · GHSA-qprj-mxfp-87w7

Sandbox escape in Mozilla Firefox and Thunderbird graphics component

LOW 31

Sandbox escape due to uninitialized memory in the Graphics component.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00224 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-908

TI-2026-71878 CVE-2026-109752 · GHSA-32vp-3mx6-7c8m

Use-after-free in Firefox and Thunderbird DOM Workers component

LOW 24

Use-after-free in the DOM: Workers component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00231 Published 2026-10-13 Partial fix · 153.5, 158 CWE-416

TI-2026-71873 CVE-2026-109741 · GHSA-9g78-x9v4-2grp

Use-after-free in Mozilla Firefox and Thunderbird Storage component

LOW 24

Use-after-free in the Storage: Bucket File System component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00231 Published 2026-10-13 Partial fix · 153.5, 158 CWE-416

TI-2026-71872 CVE-2026-109738 · GHSA-3p73-m32p-fgv8

Use after free in Mozilla Firefox

LOW 24

Use-after-free in the Audio/Video: Playback component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00231 Published 2026-10-13 Partial fix · 153.5, 158 CWE-416

TI-2026-71870 CVE-2026-109732 · GHSA-vf8c-r45h-cvhp

Use-after-free in Mozilla Firefox and Thunderbird Streams component

LOW 24

Use-after-free in the DOM: Streams component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00242 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-416

TI-2026-71869 CVE-2026-109729 · GHSA-h6qv-7hjp-gr8f

Use-after-free in the JavaScript Engine: JIT component

LOW 24

Use-after-free in the JavaScript Engine: JIT component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00242 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-416

TI-2026-71868 CVE-2026-109728 · GHSA-7c6q-3qx5-qp9x

Use-after-free in Mozilla Firefox and Thunderbird Animation component

LOW 24

Use-after-free in the DOM: Animation component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00228 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-416

TI-2026-71867 CVE-2026-109727 · GHSA-4cg4-mwp3-58fc

Use-after-free in Mozilla Firefox and Thunderbird Audio/Video

LOW 24

Use-after-free in the Audio/Video component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00228 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-416

TI-2026-71866 CVE-2026-109726 · GHSA-rr85-3f75-v62f

Use-after-free in the SVG component of Mozilla Firefox and Thunderbird

LOW 24

Use-after-free in the SVG component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00228 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-416

TI-2026-71865 CVE-2026-109725 · GHSA-h2fj-2h2q-386x

Use-after-free in Mozilla Firefox and Thunderbird DOM component

LOW 24

Use-after-free in the DOM: Core & HTML component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00228 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-416

TI-2026-71864 CVE-2026-109724 · GHSA-cw6g-6frr-px9q

Use-after-free in Mozilla Firefox and Thunderbird DOM component

LOW 24

Use-after-free in the DOM: Core & HTML component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00217 Published 2026-10-13 Partial fix · 153.5, 158 CWE-416

TI-2026-71862 CVE-2026-109718 · GHSA-m37p-7gw6-62vr

Use-after-free in XML component of Mozilla Firefox and Thunderbird

LOW 24

Use-after-free in the XML component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00228 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-416

TI-2026-71861 CVE-2026-109717 · GHSA-3fxh-rfxv-74gh

Use-after-free in Mozilla Firefox and Thunderbird DOM bindings

LOW 24

Use-after-free in the DOM: Bindings (WebIDL) component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00217 Published 2026-10-13 Partial fix · 153.5, 158 CWE-416

TI-2026-71860 CVE-2026-109713 · GHSA-mw96-gf64-c265

Use-after-free in Mozilla Firefox and Thunderbird Crash Reporting

LOW 24

Use-after-free in the Crash Reporting component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00217 Published 2026-10-13 Partial fix · 153.5, 158 CWE-416

TI-2026-71859 CVE-2026-109711 · GHSA-5j3c-f6j9-v5mp

Use-after-free in Mozilla Firefox and Thunderbird Canvas2D component

LOW 24

Use-after-free in the Graphics: Canvas2D component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00217 Published 2026-10-13 Partial fix · 153.5, 158 CWE-416

TI-2026-71855 CVE-2026-109706 · GHSA-w76r-6v84-vvf5

Use after free in Mozilla Firefox

LOW 24

Use-after-free in the Storage: IndexedDB component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00228 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-416

TI-2026-71679 CVE-2026-109763 · GHSA-gcff-5w52-74vw

Mozilla File Handling mitigation bypass fixed in Firefox and Thunderbird

LOW 24

Mitigation bypass in the File Handling component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00248 Published 2026-10-13 Partial fix · 153.5, 158 CWE-20

TI-2026-71657 CVE-2026-109723 · GHSA-94rc-qqr5-2gj6

Integer overflow in Mozilla Firefox and Thunderbird Layout component

LOW 24

Integer overflow in the Layout: Text and Fonts component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00217 Published 2026-10-13 Partial fix · 153.5, 158 CWE-190

TI-2026-71655 CVE-2026-109721 · GHSA-h7f3-g97w-8vxg

Incorrect boundary conditions in Firefox and Thunderbird JIT

LOW 24

Incorrect boundary conditions in the JavaScript Engine: JIT component.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00278 Published 2026-10-13 Partial fix · 153.5, 158 CWE-119

TI-2026-71877 CVE-2026-109751 · GHSA-q8c3-m83m-v53m

Mozilla Firefox and Thunderbird networking component leaks information

LOW 20

Information disclosure in the Networking component.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0026 Published 2026-10-13 Partial fix · 153.5, 158 CWE-200

TI-2026-71874 CVE-2026-109742 · GHSA-f27g-q9q2-85gc

Information disclosure in Mozilla Firefox and Thunderbird PDF Viewer

LOW 20

Information disclosure in the PDF Viewer component.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0026 Published 2026-10-13 Partial fix · 153.5, 158 CWE-200

TI-2026-71863 CVE-2026-109719 · GHSA-gxhg-h66x-3v4w

Race condition and use-after-free in Mozilla Firefox and Thunderbird

LOW 19

Race condition, use-after-free in the Graphics: CanvasWebGL component.

CVSS 3.1MEDIUM 4.2 Network No auth User interaction EPSS 0.00172 Published 2026-10-13 Partial fix · 115.43, 153.5 +1 CWE-362