Mozilla Firefox Security Advisory: Fixes Multiple Memory Safety and Site Isolation Vulnerabilities

Vulnerability Overview The Mozilla Foundation has issued a security advisory (2026-69) stating that multiple security vulnerabilities have been resolved in Firefox ESR 115.38. These vulnerabilities include: 1. CVE-2026-15719: Site isolation issue in DOM (Navigation component) 2. CVE-2026-16349: Same-origin policy bypass in DOM (Navigation component) 3. CVE-2026-16350: Off-by-one error in Audio/Video component 4. CVE-2026-16351: Use-after-free vulnerability in DOM (Navigation component) 5. CVE-2026-16352: Use-after-free vulnerability in Accessibility API component 6. CVE-2026-16353: Invalid pointer in DOM Binding (WebIDL) component 7. CVE-2026-16354: Information disclosure in Graphics component (ImageLib) 8. CVE-2026-16355: Miscompilation in JavaScript engine (JIT) 9. CVE-2026-16356: Use-after-free vulnerability in Accessibility API component 10. CVE-2026-16357: Off-by-one error in Graphics component 11. CVE-2026-16358: Site isolation issue in Graphics component (WebRender) 12. CVE-2026-16359: Off-by-one error in Audio/Video component (GMP) 13. CVE-2026-16360: Memory safety issues in Firefox ESR 115.38, Firefox ESR 140.13, and Firefox 153 14. CVE-2026-16361: Memory safety issues in Firefox ESR 115.38 and Firefox ESR 140.13 Affected Versions Firefox ESR 115.38 Firefox ESR 140.13 Firefox 153 Remediation All the above vulnerabilities have been resolved in Firefox ESR 115.38. Users are advised to update to this version as soon as possible to mitigate potential security risks. POC Code or Exploit Code No specific POC code or exploit code was provided on the page. --- Summary: The Mozilla Foundation has released a security advisory highlighting multiple critical security vulnerabilities resolved in Firefox ESR 115.38, including site isolation issues, same-origin policy bypasses, use-after-free vulnerabilities, information disclosure, and miscompilation. These vulnerabilities affect Firefox ESR 115.38, Firefox ESR 140.13, and Firefox 153. Users are recommended to update to Firefox ESR 115.38 promptly to fix these issues. No specific POC code or exploit code was provided on the page.

Goal Reached Thanks to every supporter — we hit 100%!

Mozilla Firefox Security Advisory: Fixes Multiple Memory Safety and Site Isolation Vulnerabilities