Mozilla Firefox ESR 140.13 Security Advisory (Multiple CVEs)

Mozilla Foundation Security Advisory 2026-70 Vulnerability Overview Mozilla Foundation has released Security Advisory 2026-70, which addresses multiple security vulnerabilities in Firefox ESR 140.13. Affected Scope Firefox ESR Fix Solution Firefox ESR 140.13 Vulnerability Details CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component Reporter: Christian Holler Impact: critical Description: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. References: Bug 2045443 CVE-2026-15719: Site isolation issue in the DOM: Navigation component Reporter: Atsushi Sada Impact: critical Description: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. References: Bug 2043820 CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component Reporter: Tran Quac Impact: high References: Bug 2034682 CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component Reporter: Tomoya Nakanishi Impact: high References: Bug 2042033 CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component Reporter: crixer Impact: high References: Bug 2043188 CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component Reporter: Yaqoub Aldurayhim Impact: high References: Bug 2045408 CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component Reporter: Oskar L Impact: high References: Bug 2046410 CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component Reporter: Nebula Security Impact: high References: Bug 2047689 CVE-2026-16353: Invalid pointer in the DOM: Bindings (WebIDL) component Reporter: fedek Impact: high References: Bug 2049523 CVE-2026-16354: Information disclosure in the Graphics: ImageLib component Reporter: satyamasd Impact: high References: Bug 2050620 CVE-2026-16368: Incorrect boundary conditions in the JavaScript: WebAssembly component Reporter: Nebula Security Impact: high References: Bug 2051015 CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component Reporter: Amy Burnett of OpenAI Impact: high References: Bug 2051854 CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component Reporter: Amy Burnett of OpenAI Impact: high References: Bug 2052207 CVE-2026-16356: Sandbox escape due to use-after-free in the Disability Access APIs component Reporter: Oskar L Impact: high References: Bug 2052562 CVE-2026-16357: Incorrect boundary conditions in the Graphics component Reporter: SupSrhSi Impact: high References: Bug 2053326 CVE-2026-16371: Privilege escalation in the DOM: Navigation component Reporter: stevej Impact: moderate References: Bug 2008309 CVE-2026-16374: Information disclosure in the Framework component in DevTools Reporter: Tomoya Nakanishi Impact: moderate References: Bug 2027510 CVE-2026-16375: Site isolation issue in the Networking: HTTP component Reporter: pakhunov.anton.n Impact: moderate References: Bug 2022140 CVE-2026-16377: Mitigation bypass in the PDF Viewer component Reporter: Nikola Kojic Impact: moderate References: Bug 2037770 CVE-2026-16379: Privilege escalation in the DOM: Content Processes component Reporter: Shu Takahashi Impact: moderate References: Bug 2039452 CVE-2026-16358: Site isolation issue in the Graphics: WebRender component Reporter: Hcamael Impact: moderate References: Bug 2040119 CVE-2026-16381: Same-origin policy bypass in the Networking: DNS component Reporter: Rintaro Kawasugi Impact: moderate References: Bug 2041001 CVE-2026-16383: Mitigation bypass in the DOM: Networking component Reporter: Ibuki Sato and Tomoya Nakanishi Impact: moderate References: Bug 2041002 CVE-2026-16387: Site isolation issue in the Networking component Reporter: Atsushi Sada Impact: moderate References: Bug 2043200 CVE-2026-16390: Mitigation bypass in the Enterprise Policies component Reporter: Souma Ohsawa Impact: moderate References: Bug 2044527 CVE-2026-16391: Information disclosure in the Storage: IndexedDB component Reporter: Tomoya Nakanishi Impact: moderate References: Bug 2044530 CVE-2026-16359: Incorrect boundary conditions in the Audio/Video: GMP component Reporter: Jacolon Walker Impact: moderate References: Bug 2049424 CVE-2026-16396: Privilege escalation in WebExtensions Reporter: Guy Pham Impact: moderate References: Bug 2047240 CVE-2026-16405: Information disclosure in the Networking: WebSockets component Reporter: Yaqoub Aldurayhim Impact: low References: Bug 2036591 CVE-2026-16412: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 Reporter: Christian Holler, Frederik Braun, Justin Link, Simon Friedberger, Tom Ritter, Tom Schuster and the Mozilla Fuzzing Team Impact: high Description: Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrar

Goal Reached Thanks to every supporter — we hit 100%!

Mozilla Firefox ESR 140.13 Security Advisory (Multiple CVEs)