Threat Intelligence Database

A race condition vulnerability was identified in the DOM Content Processes component of Firefox. This issue was addressed and fixed in Firefox version 156 and Firefox ESR 153.3. The vulnerability is classified with high impact due to its potential security implications. No known exploits are reported in the wild at this time.

CVE-2026-92031 is an information disclosure vulnerability in the Graphics: ImageLib component of Firefox. This issue was addressed and fixed in Firefox 156 and Firefox ESR 140.16. The vulnerability is considered to have moderate impact. No active exploitation in the wild has been reported.

CVE-2026-92027 is a use-after-free vulnerability in the DOM: Streams component of Firefox. This security flaw was addressed and fixed in Firefox 156 and Firefox ESR versions 115.41, 140.16, and 153.3. The vulnerability is considered high impact due to its potential to affect memory safety within the browser's DOM Streams implementation.

CVE-2026-92029 is a use-after-free vulnerability in the SVG component of Firefox. This security flaw was addressed and fixed in Firefox 156 and Firefox ESR versions 115.41, 140.16, and 153.3. The vulnerability is classified with high impact due to the potential risks associated with use-after-free bugs. No active exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate the risk.

A use-after-free vulnerability exists in the DOM Core & HTML component of Firefox. This security flaw was addressed and fixed in Firefox 156 and Firefox ESR versions 115.41, 140.16, and 153.3. The vulnerability has a high impact rating according to the Mozilla advisory. No active exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate the risk.

CVE-2026-92025 is a use-after-free vulnerability in the DOM Navigation component of Firefox. This vulnerability has been assigned a high impact rating by Mozilla. It was fixed in Firefox 156 and Firefox ESR versions 115.41, 140.16, and 153.3. The issue involves improper memory handling that could potentially be exploited to cause security issues. No active exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate the risk.

CVE-2026-92023 is a use-after-free vulnerability in the XML component of Firefox. This security flaw was addressed and fixed in Firefox 156 and Firefox ESR versions 115.41, 140.16, and 153.3. The vulnerability is classified with high impact by the vendor.

CVE-2026-92022 is a use-after-free vulnerability in the DOM: HTML Parser component of Firefox. This security flaw was addressed and fixed in Firefox 156 and Firefox ESR versions 115.41, 140.16, and 153.3. The vulnerability is considered high impact due to its potential to affect memory safety within the browser's HTML parsing functionality.

A use-after-free vulnerability exists in the SVG component of Firefox. This security flaw was addressed and fixed in Firefox version 156 and Firefox ESR versions 115.41, 140.16, and 153.3. The vulnerability is considered high impact due to the potential risks associated with use-after-free bugs in memory management.

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.