Security Vulnerabilities fixed in Firefox 158 — Mozilla

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2026-109763Mitigation bypass in the File Handling component
• CVE-2026-109708Sandbox escape due to incorrect boundary conditions in the Networking component
• CVE-2026-109707Sandbox escape due to use-after-free in the Networking component
• CVE-2026-109705Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component
• CVE-2026-109772Same-origin policy bypass in the DevTools component
• CVE-2026-109774Invalid pointer, undefined behavior in the DOM: Notifications component
• CVE-2026-109780Mitigation bypass in the DOM: Core & HTML component
• CVE-2026-109750Site isolation issue in the DOM: Web Authentication component
• CVE-2026-109762Incorrect boundary conditions in the SVG component
• CVE-2026-109770Spoofing issue in the DOM: Web Serial component
• CVE-2026-109764Mitigation bypass in the Enterprise Policies component
• CVE-2026-109766Mitigation bypass in the Enterprise Policies component
• CVE-2026-109760Mitigation bypass in the Networking: HTTP component
• CVE-2026-109759Site isolation issue in the Networking component
• CVE-2026-109754Incorrect boundary conditions in the DOM: Editor component
• CVE-2026-109747Other issue in the Address Bar component
• CVE-2026-109746Mitigation bypass in the DOM: Security component
• CVE-2026-109745Sandbox escape due to uninitialized memory in the DOM: Web Serial component
• CVE-2026-109744Other issue in the DOM: File component
• CVE-2026-109740Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
• CVE-2026-109737Mitigation bypass in the Enterprise Policies component
• CVE-2026-109736Frame poisoning in the Layout component
• CVE-2026-109734Mitigation bypass in the DOM: Security component
• CVE-2026-109731Incorrect boundary conditions in the Graphics: Canvas2D component
• CVE-2026-109721Incorrect boundary conditions in the JavaScript Engine: JIT component
• CVE-2026-109720JIT miscompilation in the JavaScript: WebAssembly component
• CVE-2026-109722JIT miscompilation in the JavaScript Engine: JIT component
• CVE-2026-109716Incorrect boundary conditions in the JavaScript Engine component
• CVE-2026-109715Incorrect boundary conditions in the JavaScript Engine component
• CVE-2026-109712Sandbox escape due to uninitialized memory in the Graphics component
• CVE-2026-109776Race condition in the XPCOM component
• CVE-2026-109757Sandbox escape due to race condition in the Networking component
• CVE-2026-109755Sandbox escape in the DOM: Content Processes component
• CVE-2026-109723Integer overflow in the Layout: Text and Fonts component
• CVE-2026-109714Incorrect boundary conditions in the Layout component
• CVE-2026-109730Integer overflow in the Graphics component
• CVE-2026-109733JIT miscompilation in the JavaScript Engine: JIT component
• CVE-2026-109753Incorrect boundary conditions in the Layout component
• CVE-2026-109739Privilege escalation in the WebExtensions component
• CVE-2026-109743Privilege escalation in the Panning and Zooming component
• CVE-2026-109704Privilege escalation in the Application Update component
• CVE-2026-109709Information disclosure, privilege escalation in the Security: Process Sandboxing component
• CVE-2026-109756Privilege escalation in the DOM: Navigation component
• CVE-2026-109778Privilege escalation in the WebExtensions component
• CVE-2026-109781Denial-of-service in the Printing: Output component
• CVE-2026-109777Information disclosure in the Storage: IndexedDB component
• CVE-2026-109775Denial-of-service in the WebRTC component
• CVE-2026-109767Information disclosure in the Networking component
• CVE-2026-109765Race condition, use-after-free in the Graphics: Text component
• CVE-2026-109752Use-after-free in the DOM: Workers component

Source and provenance

Original title: Security Vulnerabilities fixed in Firefox 158 — Mozilla. Captured 29 Oct 2026, 03:43 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.