CVE-2026-92014: Privilege escalation due to incorrect boundary conditions in the Graphics component
Published Sep 15, 2026
·Updated
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41 and Firefox ESR 140.16.
Affected Software
1 affected component
Firefox ESR<115.41, <140.16
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.41 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 140.16
Event History
Sep 15, 2026
CVE Published
via MITRE·12:33 PM
Data Sourced
via MITRE·12:33 PM
Description
Frequently Asked Questions
1
Which Firefox ESR releases contain the fix?
The issue was fixed in Firefox ESR 115.41 and Firefox ESR 140.16.
2
What type of impact does this issue have?
It is a privilege-escalation vulnerability in the Graphics component caused by incorrect boundary conditions.