CVE-2026-92006
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 15
CVSS
8.8
Alto
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 15 sept 2026 · Última mod.: 15 sept 2026 · CWE-120
Sin historial EPSS suficiente todavía.
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=2057121
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-90/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-91/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-92/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-93/
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-920438.8 ALT—
———Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Firefox ESR 153.3.6hCVE-2026-920208.8 ALT—
———Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.6hCVE-2026-920148.8 ALT—
———Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41 and Firefox ESR 140.16.6hCVE-2026-920138.8 ALT—
———Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.6hCVE-2026-920128.8 ALT—
———Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.6hCVE-2026-920118.8 ALT—
———Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, and Firefox ESR 153.3.6h