REDHAT-BUG-2533797: Use After Free
Published Sep 15, 2026
·Updated
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
Affected Software
4 affected components
Mozilla Firefox<156
Mozilla Firefox ESR 115<115.41
Mozilla Firefox ESR 140<140.16
Mozilla Firefox ESR 153<153.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 156 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.41 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 140.16 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 153.3
Event History
Sep 15, 2026
Data Sourced
via Red Hat·01:05 PM
DescriptionSeverityAffected Software