Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Last checked: 2026-10-13 19:56 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-29 16:29 UTC)
Fix evidence last checked: 2026-10-21 14:12 UTC
Debian 12 (Bookworm)
DLA-4814-1 · Published 2026-10-02
DLA-4810-1 · Published 2026-10-02
Debian 13 (Trixie)
DSA-6533-1 · Published 2026-09-30
DSA-6536-1 · Published 2024-12-01
Oracle Linux 10
ELSA-2026-80674 · Published 2026-10-11
ELSA-2026-76764 · Published 2026-10-07
Oracle Linux 8
ELSA-2026-76850 · Published 2026-10-08
Oracle Linux 9
ELSA-2026-80694 · Published 2026-10-13
ELSA-2026-76761 · Published 2026-10-07
Red Hat Enterprise Linux 10
RHSA-2026:80674 · Published 2026-10-12
RHSA-2026:76764 · Published 2026-10-06
Red Hat Enterprise Linux 8
RHSA-2026:76850 · Published 2026-10-06
Red Hat Enterprise Linux 9
RHSA-2026:80694 · Published 2026-10-12
RHSA-2026:76761 · Published 2026-10-06
SUSE Linux Enterprise Server 12 SP5
SUSE-SU-2026:4543 · Published 2026-10-06
SUSE Linux Enterprise Server 15 SP5
SUSE-SU-2026:4545 · Published 2026-10-06
SUSE Linux Enterprise Server 15 SP6
SUSE-SU-2026:4545 · Published 2026-10-06
SUSE Linux Enterprise Server 15 SP7
SUSE-SU-2026:4627 · Published 2026-10-12
SUSE-SU-2026:4545 · Published 2026-10-06
SUSE Linux Enterprise Server 16
SUSE-SU-2026:23981 · Published 2026-09-30