Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Mfsa2026 106 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 158.0 | Oct 13, 2026 | Oct 13, 2026 |
| Mfsa2026 107 | — | Upgrade to Mozilla Firefox ESR version 115.43Upgrade to the latest version of Mozilla Firefox | Oct 13, 2026 | Oct 13, 2026 |
| Mfsa2026 108 | — | Upgrade to Mozilla Firefox ESR version 153.5Upgrade to the latest version of Mozilla Firefox | Oct 13, 2026 | Oct 13, 2026 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 153.5 | Oct 13, 2026 | Oct 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub