REDHAT-BUG-2562095: Use After Free

The vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

The issue affects the DOM Events component and is classified as a use-after-free vulnerability.

Published Oct 27, 2026

Updated

Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Affected Software

3 affected components

Mozilla Firefox<159

Mozilla Firefox ESR 115<115.44

Mozilla Firefox ESR 153<153.6

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Firefox to a version that resolves this vulnerability.
Fixed in 159
Upgrade
Upgrade Firefox ESR to a version that resolves this vulnerability.
Fixed in 115.44
Upgrade
Upgrade Firefox ESR to a version that resolves this vulnerability.
Fixed in 153.6

Oct 27, 2026

Data Sourced

via Red Hat·05:40 PM

DescriptionSeverityAffected Software

The vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

The issue affects the DOM Events component and is classified as a use-after-free vulnerability.