CVE-2026-92025 is a use-after-free vulnerability located in the DOM Navigation component of the Firefox browser. Use-after-free vulnerabilities occur when a program continues to use a pointer after the memory it points to has been freed, potentially leading to arbitrary code execution or crashes. Mozilla has assigned a high impact rating to this vulnerability and addressed it in Firefox 156 and Firefox ESR 115.41, 140.16, and 153.3. The vendor advisory confirms the fix and recommends updating to these versions. No detailed technical exploitation methods or in-the-wild exploit reports are provided.

The vulnerability is rated as high impact by Mozilla, indicating that successful exploitation could lead to significant security consequences such as arbitrary code execution or browser compromise. However, no known exploits in the wild have been reported at this time.

A fix is available and has been released by Mozilla. Users and administrators should update Firefox to version 156 or later, or Firefox ESR to versions 115.41, 140.16, or 153.3 to remediate this vulnerability. No additional mitigation actions are required beyond applying the official update.