PT-2026-102549 · Mozilla · Firefox+1

·

CVE-2026-100775

·

Published

2026-09-29

·

Updated

2026-09-29

CVSS v3.1

9.6

Critical

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157
Description A sandbox escape exists within the Graphics component. A sandbox is a security mechanism used to isolate running applications from the rest of the system to prevent malicious code from accessing sensitive data or resources.
Recommendations Update Firefox to version 157 or later. Update Firefox ESR to version 115.42 or later. Update Firefox ESR to version 140.17 or later. Update Firefox ESR to version 153.4 or later. Update Thunderbird to version 157 or later.

Fix

Protection Mechanism Failure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-100775

Affected Products

Firefox
Thunderbird