CVE-2026-100781

Summary

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefox115.42 <= 115.*unaffected
MozillaFirefox140.17 <= 140.*unaffected
MozillaFirefox153.4 <= 153.*unaffected
MozillaFirefox157 <= *unaffected

Weaknesses

References