Search: CVE-2026-100784

CVE-2026-100784 is a use-after-free vulnerability in the Layout: Text and Fonts component of Mozilla Firefox and Thunderbird. It affects multiple versions of Firefox and Thunderbird prior to their respective fixed releases. The vulnerability has a high severity with a CVSS score of 8.8, indicating it can lead to significant confidentiality, integrity, and availability impacts. Mozilla has released official fixes in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, Firefox ESR 140.17, Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4.