Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Last checked: 2026-10-05 16:33 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-29 00:00 UTC)
Fix evidence last checked: 2026-10-24 01:59 UTC
AlmaLinux 10
Repository package · Published 2026-10-07 · Observed 2026-10-24
Debian 12 (Bookworm)
DLA-4814-1 · Published 2026-10-02
DLA-4810-1 · Published 2026-10-02
Debian 13 (Trixie)
DSA-6533-1 · Published 2026-09-30
DSA-6536-1 · Published 2024-12-01
Oracle Linux 10
ELSA-2026-80674 · Published 2026-10-11
ELSA-2026-76764 · Published 2026-10-07
Oracle Linux 8
ELSA-2026-76850 · Published 2026-10-08
Oracle Linux 9
ELSA-2026-80694 · Published 2026-10-13
ELSA-2026-76761 · Published 2026-10-07
Red Hat Enterprise Linux 10
RHSA-2026:80674 · Published 2026-10-12
RHSA-2026:76764 · Published 2026-10-06
Red Hat Enterprise Linux 8
RHSA-2026:76850 · Published 2026-10-06
Red Hat Enterprise Linux 9
RHSA-2026:80694 · Published 2026-10-12
RHSA-2026:76761 · Published 2026-10-06
Rocky Linux 10
RLSA-2026:80674 · Published 2026-10-24
RLSA-2026:76764 · Published 2026-10-24
Rocky Linux 8
RLSA-2026:76850 · Published 2026-10-24
Rocky Linux 9
RLSA-2026:80694 · Published 2026-10-24
RLSA-2026:76761 · Published 2026-10-24
SUSE Linux Enterprise Server 12 SP5
SUSE-SU-2026:4543 · Published 2026-10-06
SUSE Linux Enterprise Server 15 SP5
SUSE-SU-2026:4545 · Published 2026-10-06
SUSE Linux Enterprise Server 15 SP6
SUSE-SU-2026:4545 · Published 2026-10-06
SUSE Linux Enterprise Server 15 SP7
SUSE-SU-2026:4627 · Published 2026-10-12
SUSE-SU-2026:4545 · Published 2026-10-06
SUSE Linux Enterprise Server 16
SUSE-SU-2026:23981 · Published 2026-09-30