GHSA-w34f-74jx-hvjcCriticalCVSS 9.8
Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of...
🔗 CVE IDs covered (1)
📋 Description
Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.
🔗 References (11)
- https://nvd.nist.gov/vuln/detail/CVE-2026-74987
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=1500946%2C1788109%2C2045379%2C2045380%2C2049339%2C2049393%2C2053580%2C2054662%2C2054665%2C2054673%2C2054785%2C2058645
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=2048797%2C2050536%2C2053272%2C2053579%2C2057115%2C2057116%2C2057130%2C2057991%2C2057995%2C2058002%2C2058008%2C2058032%2C2058102%2C2058667
- https://bugzilla.mozilla.org/show_bug.cgi?id=2059424
- https://www.mozilla.org/security/advisories/mfsa2026-74
- https://www.mozilla.org/security/advisories/mfsa2026-76
- https://www.mozilla.org/security/advisories/mfsa2026-77
- https://www.mozilla.org/security/advisories/mfsa2026-78
- https://www.mozilla.org/security/advisories/mfsa2026-79
- https://www.mozilla.org/security/advisories/mfsa2026-80
- https://github.com/advisories/GHSA-w34f-74jx-hvjc