REDHAT-BUG-2517837: Use After Free

Q: What should I do to remediate this issue?

Update Firefox to a release that includes the fix: Firefox 154, Firefox ESR 140.14, or Firefox ESR 153.1. Verify the installed Firefox version after updating.

Published Aug 18, 2026

Updated

Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

Affected Software

1 affected component

Mozilla Firefox<154, =140.14, =153.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Firefox (Graphics: Canvas2D) to a version that resolves this vulnerability.
Fixed in 154
Upgrade
Upgrade Firefox ESR (Graphics: Canvas2D) to a version that resolves this vulnerability.
Fixed in 140.14
Upgrade
Upgrade Firefox ESR (Graphics: Canvas2D) to a version that resolves this vulnerability.
Fixed in 153.1

Event History

Aug 18, 2026

Data Sourced

via Red Hat·12:50 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What should I do to remediate this issue?

Update Firefox to a release that includes the fix: Firefox 154, Firefox ESR 140.14, or Firefox ESR 153.1. Verify the installed Firefox version after updating.