REDHAT-BUG-2517833: High severity Mozilla Firefox vulnerability

The issue was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

Successful exploitation can result in privilege escalation in the Graphics: CanvasWebGL component.

Published Aug 18, 2026

Updated

Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

Affected Software

1 affected component

Mozilla Firefox<154, >140.13<=140.14, >153.0<=153.1

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Mozilla Firefox (including Firefox ESR) - Graphics: CanvasWebGL to a version that resolves this vulnerability.
Fixed in 154
Upgrade
Upgrade Mozilla Firefox ESR - Graphics: CanvasWebGL to a version that resolves this vulnerability.
Fixed in 140.14
Upgrade
Upgrade Mozilla Firefox ESR - Graphics: CanvasWebGL to a version that resolves this vulnerability.
Fixed in 153.1

Aug 18, 2026

Data Sourced

via Red Hat·12:50 PM

DescriptionSeverityAffected Software

The issue was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

Successful exploitation can result in privilege escalation in the Graphics: CanvasWebGL component.