Security update for MozillaFirefox

This security update for Mozilla Firefox ESR 153.2.0 addresses numerous vulnerabilities identified by CVE identifiers CVE-2026-75874 through CVE-2026-84145 and others. The issues include sandbox escapes in the Remote Settings Client and DOM components, use-after-free vulnerabilities in JavaScript GC, Audio/Video, and DOM components, privilege escalations in Graphics and Application Update components, information disclosures in Networking and Graphics components, site isolation issues in DOM components, spoofing and clickjacking in DOM components, and integer overflow in Graphics ImageLib. These vulnerabilities were reported by various security researchers and fixed in Firefox 154 and Firefox ESR 153.2 releases.

The vulnerabilities allow for sandbox escapes, privilege escalations, use-after-free memory corruption, information disclosure, site isolation bypasses, spoofing, and clickjacking. These could potentially allow attackers to execute arbitrary code, escalate privileges, bypass security boundaries, and leak sensitive information. The impact severity ranges from moderate to high depending on the specific vulnerability and affected component.

A security update fixing these vulnerabilities is available in Firefox 154 and Firefox ESR 153.2. Users and administrators should apply these official updates promptly to mitigate the risks. No additional mitigation actions are indicated beyond applying the official fixes.