PT-2026-91950 · Mozilla+1 · Firefox Esr+2

·

CVE-2026-92014

·

Published

2026-09-15

·

Updated

2026-10-06

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 115.41 Firefox ESR versions prior to 140.16 Thunderbird versions prior to 140.16
Description Incorrect boundary conditions in the Graphics component allow for privilege escalation.
Recommendations Update Firefox ESR to version 115.41 or later. Update Firefox ESR to version 140.16 or later. Update Thunderbird to version 140.16 or later.

Fix

LPE

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:69461
ALSA-2026:69462
ALSA-2026:70642
ALSA-2026:71652
ALSA-2026:73130
ALSA-2026:73971
CVE-2026-92014
OESA-2026-4120
OESA-2026-4121
OESA-2026-4122
OESA-2026-4123
OPENSUSE-SU-2026:11827-1

Affected Products

Firefox Esr
Rocky Linux
Thunderbird