CVE-2026-92027
Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firef
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Sep 15, 2026 · Last modified: Sep 15, 2026
Not enough EPSS history yet.
Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=2068433
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-90/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-91/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-92/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-93/
No related CVEs by CWE or product.