Where
-Infinity
0
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
9.6
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
9.6
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
9.6
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1.

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
EPSS
0.27%
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
EPSS
0.16%
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
EPSS
0.16%
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Incorrect boundary conditions in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use-after-free in the Cycle Collector component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160.

1 / 2
Source: NVD
First published (updated )
Severity
7
Use After Free

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, and Firefox ESR 153.5.

First published (updated )
Severity
7
Use After Free

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, and Firefox ESR 153.5.

First published (updated )
Severity
7

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, and Firefox ESR 153.5.

First published (updated )
Severity
7
Use After Free

Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, and Firefox ESR 153.5.

First published (updated )
Severity
7
Use After Free

Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.

First published (updated )
Severity
7
Use After Free

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2.

First published (updated )
Severity
7

Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.

First published (updated )
Severity
7

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.

First published (updated )
Severity
7
Use After Free

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.

First published (updated )
Severity
7

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.

First published (updated )
Severity
7
Use After Free

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

First published (updated )
Severity
7
Use After Free

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

First published (updated )
Severity
7
Use After Free

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

First published (updated )
Severity
7
Use After Free

Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203