CVE-2026-16362 is a use-after-free vulnerability affecting the WebRTC Audio/Video component in Mozilla Firefox. Use-after-free vulnerabilities occur when a program continues to use memory after it has been freed, potentially leading to memory corruption or arbitrary code execution. Mozilla fixed this vulnerability in Firefox 153 and Firefox ESR 140.13 as part of a security update addressing multiple high-impact vulnerabilities. The vendor advisory classifies the impact as high and confirms that the issue is resolved in these versions. There are no confirmed reports of exploitation in the wild for this vulnerability.

The vulnerability could allow an attacker to cause memory corruption via use-after-free in the WebRTC Audio/Video component, which may lead to arbitrary code execution or other security breaches. Mozilla rates the impact as high. However, there are no known active exploits in the wild at this time.

Mozilla has released official fixes for this vulnerability in Firefox 153 and Firefox ESR 140.13. Users and administrators should update affected Firefox installations to these versions or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the vendor's official patches. Patch status is confirmed by the Mozilla advisories.