Red Hat Security Advisory

RHSA-2026:92226

firefox security update

Released 2026-10-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) firefox-140.17.0-1.el9_2, firefox-x11-140.17.0-1.el9_2

Fixes 43 records

TI-2026-64927 CVE-2026-100788 · GHSA-q45r-899q-qwvr

Invalid pointer in the JavaScript: WebAssembly component

MEDIUM 49

Invalid pointer in the JavaScript: WebAssembly component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00415 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-824

TI-2026-64933 CVE-2026-100794 · GHSA-8j79-hq86-r8v5

Memory corruption in Mozilla Thunderbird

MEDIUM 43

Sandbox escape due to incorrect boundary conditions in the Internationalization component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00321 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-119

TI-2026-64925 CVE-2026-100786 · GHSA-vmj2-hchx-7q7v

Use after free in Mozilla Firefox

MEDIUM 43

Sandbox escape due to use-after-free in the Graphics component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00319 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64920 CVE-2026-100781 · GHSA-4ghr-4mcr-5x55

Memory corruption in Mozilla Firefox

MEDIUM 43

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00328 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-119

TI-2026-64917 CVE-2026-100778 · GHSA-jm26-3479-fr7j

Use after free in Mozilla Firefox

MEDIUM 43

Sandbox escape due to use-after-free in the DOM: Core & HTML component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00319 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64914 CVE-2026-100775 · GHSA-mw76-22g7-fw96

Protection mechanism failure in Mozilla Firefox

MEDIUM 43

Sandbox escape in the Graphics component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00328 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-693

TI-2026-64909 CVE-2026-100770 · GHSA-cm7f-mvvg-gwpr

Use after free in Mozilla Firefox

MEDIUM 43

Sandbox escape due to use-after-free in the DOM: Content Processes component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00319 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64901 CVE-2026-100762 · GHSA-h88x-j33p-gqc3

Use after free in Mozilla Firefox

MEDIUM 43

Sandbox escape due to use-after-free in the DOM: Content Processes component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00319 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64897 CVE-2026-100758 · GHSA-v6gg-9x3r-3gf2

Improper access control in Mozilla Firefox

MEDIUM 43

Sandbox escape in the DOM: Navigation component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00304 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-284

TI-2026-62164 CVE-2026-92035 · GHSA-hq25-mwj8-3g8m

Memory corruption in Mozilla Firefox

MEDIUM 43

Sandbox escape due to incorrect boundary conditions in the Graphics component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00328 Published 2026-09-15 Fixed in 115.42, 140.17 +2 CWE-119

TI-2026-64958 CVE-2026-100819 · GHSA-2x4q-w8v4-vwxh

Memory corruption in Mozilla Firefox

MEDIUM 42

Sandbox escape due to incorrect boundary conditions in the XPCOM component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00264 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-119

TI-2026-64957 CVE-2026-100818 · GHSA-5pwm-rr4f-fh76

Use after free in Mozilla Thunderbird

MEDIUM 42

Sandbox escape due to use-after-free in the Widget: Gtk component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00265 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-416

TI-2026-64950 CVE-2026-100811 · GHSA-646m-ffpr-629f

Use after free in Mozilla Thunderbird

MEDIUM 42

Sandbox escape due to use-after-free in the DOM: Core & HTML component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00265 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-416

TI-2026-64970 CVE-2026-100832 · GHSA-8ffm-wqc4-j2qw

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the Graphics: Canvas2D component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00245 Published 2026-09-29 Partial fix · 115.42, 140.17 +1 CWE-416

TI-2026-64959 CVE-2026-100820 · GHSA-257v-qj3f-78fw

Improper privilege management in Mozilla Thunderbird

MEDIUM 40

Privilege escalation in the Address Bar component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00238 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-269

TI-2026-64946 CVE-2026-100807 · GHSA-5fmw-j564-6qjv

Improper privilege management in Mozilla Thunderbird

MEDIUM 40

Privilege escalation in the DOM: Service Workers component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00234 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-269

TI-2026-64940 CVE-2026-100801 · GHSA-7f52-cp5w-7wmh

Improper privilege management in Mozilla Thunderbird

MEDIUM 40

Privilege escalation in the DLL Services component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00282 Published 2026-09-29 Partial fix · 140.17, 153.4 +3 CWE-269

TI-2026-64936 CVE-2026-100797 · GHSA-g267-wr3p-8pff

Use after free in Mozilla Firefox

MEDIUM 40

Privilege escalation due to use-after-free in the Graphics: WebRender component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00251 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64930 CVE-2026-100791 · GHSA-94vx-qc4v-5hhg

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the DOM: Core & HTML component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00396 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64929 CVE-2026-100790 · GHSA-9q5w-qfph-c2x4

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the XSLT component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00319 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64928 CVE-2026-100789 · GHSA-ffvc-2cpw-m56g

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the Graphics: Canvas2D component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00319 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64924 CVE-2026-100785 · GHSA-r7ww-4m8m-rwp6

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the DOM: Core & HTML component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00319 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64923 CVE-2026-100784 · GHSA-p2x6-2xrh-qcqm

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the Layout: Text and Fonts component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00326 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64921 CVE-2026-100782 · GHSA-vw5f-8j4q-78qm

Memory corruption in Mozilla Firefox

MEDIUM 40

Privilege escalation due to incorrect boundary conditions in the Graphics component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-119

TI-2026-64919 CVE-2026-100780 · GHSA-wmqw-hpqq-jp4m

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the DOM: Core & HTML component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00319 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64918 CVE-2026-100779 · GHSA-3768-46g2-cp8x

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the XSLT component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00326 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64916 CVE-2026-100777 · GHSA-vwr3-v9qx-vq5r

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the Graphics: Canvas2D component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00319 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64915 CVE-2026-100776 · GHSA-qvvj-7hwq-q5h2

Use after free in Mozilla Thunderbird

MEDIUM 40

Use-after-free in the JavaScript: WebAssembly component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-416

TI-2026-64913 CVE-2026-100774 · GHSA-38rp-mx4j-w7p4

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the DOM: Core & HTML component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00319 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64912 CVE-2026-100773 · GHSA-rqvv-w7f6-cqh3

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the Storage: IndexedDB component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00396 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64911 CVE-2026-100772 · GHSA-w83r-p2vc-2rvf

Use after free in Mozilla Thunderbird

MEDIUM 40

Use-after-free in the DOM: Core & HTML component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-416

TI-2026-64908 CVE-2026-100769 · GHSA-99h5-m2xx-wmr7

Use after free in Mozilla Thunderbird

MEDIUM 40

Use-after-free in the JavaScript: WebAssembly component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00318 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-416

TI-2026-64906 CVE-2026-100767 · GHSA-xvrr-g74x-xj9g

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the Networking: Cache component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00326 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64896 CVE-2026-100757 · GHSA-q9fp-c34q-3gpp

Use after free in Mozilla Firefox

MEDIUM 40

Use-after-free in the Widget component.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00319 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-416

TI-2026-64910 CVE-2026-100771 · GHSA-27h8-27q2-7ppf

Undefined behavior in the DOM: Streams component

LOW 37

Undefined behavior in the DOM: Streams component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00308 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-758

TI-2026-64898 CVE-2026-100759 · GHSA-p8r8-rmpf-jhgg

Uninitialized memory in the Storage: Quota Manager component

LOW 37

Uninitialized memory in the Storage: Quota Manager component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00308 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-457

TI-2026-64895 CVE-2026-100756 · GHSA-mxhc-r43m-899w

Memory corruption in Mozilla Firefox

LOW 37

Incorrect boundary conditions in the Audio/Video: Playback component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00308 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-119

TI-2026-64942 CVE-2026-100803 · GHSA-9m3c-9jr3-3cgr

Origin validation error in Mozilla Firefox

LOW 36

Same-origin policy bypass in the WebExtensions component.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00167 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-346

TI-2026-64931 CVE-2026-100792 · GHSA-m68w-w74f-qp3v

Type confusion in Mozilla Thunderbird

LOW 31

JIT miscompilation in the JavaScript: WebAssembly component.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00262 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-843

TI-2026-64960 CVE-2026-100821 · GHSA-r8hv-xg2w-55rq

Origin validation error in Mozilla Firefox

LOW 21

Site isolation issue in the Panning and Zooming component.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00143 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-346

TI-2026-64922 CVE-2026-100783 · GHSA-qw4j-2qxm-8h8h

Uninitialized memory in the Audio/Video component

LOW 20

Uninitialized memory in the Audio/Video component.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00347 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-457

TI-2026-64905 CVE-2026-100766 · GHSA-pfpg-9xj2-7x85

Information disclosure in Mozilla Firefox

LOW 20

Information disclosure in the Networking: JAR component.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00251 Published 2026-09-29 Partial fix · 115.42, 140.17 +2 CWE-200

TI-2026-63901 CVE-2026-96869 · GHSA-3vg3-56hv-p6hr

Information disclosure in Mozilla Thunderbird

LOW 20

Information disclosure in the Networking component.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00243 Published 2026-09-29 Partial fix · 140.17, 153.4 +1 CWE-200