Threats Tagged 'ghsa-cm7f-mvvg-gwpr'

CVE-2026-100770 is a critical use-after-free vulnerability in the DOM Content Processes component of Mozilla Firefox that allows sandbox escape. This flaw was addressed and fixed in multiple Mozilla products including Firefox ESR 153.4, Firefox 157, and Thunderbird versions 140.17, 153.4, and 157. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.