Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Last checked: 2026-10-05 16:33 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-01 15:30 UTC)
Fix evidence last checked: 2026-10-09 08:14 UTC
Debian 12 (Bookworm)
DLA-4814-1 · Published 2026-10-02
DLA-4810-1 · Published 2026-10-02
Debian 13 (Trixie)
DSA-6533-1 · Published 2026-09-30
DSA-6536-1 · Published 2024-12-01
Oracle Linux 10
ELSA-2026-76764 · Published 2026-10-07
Oracle Linux 8
ELSA-2026-76850 · Published 2026-10-08
Oracle Linux 9
ELSA-2026-76761 · Published 2026-10-07
Red Hat Enterprise Linux 10
RHSA-2026:76764 · Published 2026-10-06
Red Hat Enterprise Linux 8
RHSA-2026:76850 · Published 2026-10-06
Red Hat Enterprise Linux 9
RHSA-2026:76761 · Published 2026-10-06
SUSE Linux Enterprise Server 12 SP5
SUSE-SU-2026:4543 · Published 2026-10-06
SUSE Linux Enterprise Server 15 SP5
SUSE-SU-2026:4545 · Published 2026-10-06
SUSE Linux Enterprise Server 15 SP6
SUSE-SU-2026:4545 · Published 2026-10-06
SUSE Linux Enterprise Server 15 SP7
SUSE-SU-2026:4545 · Published 2026-10-06
SUSE Linux Enterprise Server 16
SUSE-SU-2026:23981 · Published 2026-09-30