CVE-2026-92024
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 15
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Sep 15, 2026 · Last modified: Sep 15, 2026
Not enough EPSS history yet.
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=2068354
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-90/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-91/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-92/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-93/
No related CVEs by CWE or product.