CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Published Sep 15, 2026
·Updated
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
Affected Software
2 affected components
Mozilla Firefox=156
Mozilla Firefox ESR=115.41, =140.16, =153.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 156 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.41 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 140.16 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 153.3
Event History
Sep 15, 2026
CVE Published
via MITRE·12:33 PM
Data Sourced
via MITRE·12:33 PM
Description
Frequently Asked Questions
1
Which Firefox releases contain the fix?
The issue was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.