Security Vulnerabilities fixed in Firefox ESR 115.41 — Mozilla

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publisherwww.mozilla.org

Article IDNo stable ID in source URL

Verified snapshot26 Sept 2026, 20:28 UTC

Linked CVEs21

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-92019Mitigation bypass in the Remote Settings Client component
CVE-2026-92029Use-after-free in the SVG component
CVE-2026-92028Use-after-free in the DOM: Core & HTML component
CVE-2026-92024Use-after-free in the SVG component
CVE-2026-92023Use-after-free in the XML component
CVE-2026-92022Use-after-free in the DOM: HTML Parser component
CVE-2026-92018Sandbox escape in the DOM: Core & HTML component
CVE-2026-92025Use-after-free in the DOM: Navigation component
CVE-2026-92027Use-after-free in the DOM: Streams component
CVE-2026-92020Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
CVE-2026-92017Privilege escalation in the DOM: Service Workers component
CVE-2026-92015Privilege escalation in the WebExtensions component
CVE-2026-92013Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
CVE-2026-92012Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
CVE-2026-92011Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
CVE-2026-92010Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
CVE-2026-92009Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
CVE-2026-92008Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
CVE-2026-92007Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
CVE-2026-92006Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
CVE-2026-92014Privilege escalation due to incorrect boundary conditions in the Graphics component

Source and provenance

Original title: Security Vulnerabilities fixed in Firefox ESR 115.41 — Mozilla. Captured 26 Sept 2026, 20:28 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗