REDHAT-BUG-2503444: Use After Free

Published Jul 21, 2026

Updated

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13.

Affected Software

3 affected components

Mozilla Firefox=153

Mozilla Firefox ESR 115.38=115.38

Mozilla Firefox ESR 140.13=140.13

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Mozilla Firefox to a version that resolves this vulnerability.
Fixed in 153
Upgrade
Upgrade Mozilla Firefox ESR to a version that resolves this vulnerability.
Fixed in 115.38
Upgrade
Upgrade Mozilla Firefox ESR to a version that resolves this vulnerability.
Fixed in 140.13

Event History

Jul 21, 2026

Data Sourced

via Red Hat·01:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2503444?

The severity of REDHAT-BUG-2503444 is classified as high with a score of 7.

What is the nature of the vulnerability in REDHAT-BUG-2503444?

REDHAT-BUG-2503444 involves a sandbox escape due to a use-after-free issue in the Disability Access APIs component.

How do I fix REDHAT-BUG-2503444?

To mitigate REDHAT-BUG-2503444, update your Mozilla Firefox to version 153, or to Firefox ESR 115.38 or 140.13.

Which software versions are affected by REDHAT-BUG-2503444?

Mozilla Firefox and Mozilla Firefox ESR 115.38 and 140.13 are affected by REDHAT-BUG-2503444.

When was REDHAT-BUG-2503444 published?

REDHAT-BUG-2503444 was published on July 21, 2026.