CVE-2026-100789 in Firefox

Riassunto

di MITRE • 29/09/2026

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: Mozilla
• Prenotare: 26/09/2026
• Divulgazione: 29/09/2026
• Moderazione: accettato
• Voce: VDB-411358
• CPE: pronto
• CWE: CWE-416 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Pharma, Government, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-100789
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-100789
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-100789/