Security Vulnerabilities fixed in Firefox ESR 115.43 — Mozilla

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publisherwww.mozilla.org

Article IDNo stable ID in source URL

Verified snapshot29 Oct 2026, 17:33 UTC

Linked CVEs17

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-109722JIT miscompilation in the JavaScript Engine: JIT component
CVE-2026-109716Incorrect boundary conditions in the JavaScript Engine component
CVE-2026-109715Incorrect boundary conditions in the JavaScript Engine component
CVE-2026-109712Sandbox escape due to uninitialized memory in the Graphics component
CVE-2026-109730Integer overflow in the Graphics component
CVE-2026-109733JIT miscompilation in the JavaScript Engine: JIT component
CVE-2026-109753Incorrect boundary conditions in the Layout component
CVE-2026-109732Use-after-free in the DOM: Streams component
CVE-2026-109729Use-after-free in the JavaScript Engine: JIT component
CVE-2026-109728Use-after-free in the DOM: Animation component
CVE-2026-109727Use-after-free in the Audio/Video component
CVE-2026-109726Use-after-free in the SVG component
CVE-2026-109725Use-after-free in the DOM: Core & HTML component
CVE-2026-109719Race condition, use-after-free in the Graphics: CanvasWebGL component
CVE-2026-109718Use-after-free in the XML component
CVE-2026-109710Use-after-free in the Graphics: Text component
CVE-2026-109706Use-after-free in the Storage: IndexedDB component

Source and provenance

Original title: Security Vulnerabilities fixed in Firefox ESR 115.43 — Mozilla. Captured 29 Oct 2026, 17:33 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗