Opened 3 weeks ago

Closed 10 days ago

Last modified 10 days ago

#24113 closed enhancement (fixed)

firefox-153.5.0esr

Reported by: Bruce Dubbs Owned by: SecurityAdvisory
Priority: high Milestone: 98-Security
Component: BOOK Version: git
Severity: high Keywords:
Cc:

Description

New minor version.

Change History (5)

comment:1 by Joe Locash, 3 weeks ago

Owner: changed from blfs-book to Joe Locash
Priority: normal → high
Severity: normal → high
Status: new → assigned

Security fixes:

  • CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component (high)
  • CVE-2026-109706: Use-after-free in the Storage: IndexedDB component (high)
  • CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component (high)
  • CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component (high)
  • CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component (high)
  • CVE-2026-109710: Use-after-free in the Graphics: Text component (high)
  • CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component (high)
  • CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component (high)
  • CVE-2026-109713: Use-after-free in the Crash Reporting component (high)
  • CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component (high)
  • CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component (high)
  • CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component (high)
  • CVE-2026-109718: Use-after-free in the XML component (high)
  • CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component (high)
  • CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component (high)
  • CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component (high)
  • CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component (high)
  • CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component (high)
  • CVE-2026-109724: Use-after-free in the DOM: Core & HTML component (high)
  • CVE-2026-109725: Use-after-free in the DOM: Core & HTML component (high)
  • CVE-2026-109726: Use-after-free in the SVG component (high)
  • CVE-2026-109727: Use-after-free in the Audio/Video component (high)
  • CVE-2026-109728: Use-after-free in the DOM: Animation component (high)
  • CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component (high)
  • CVE-2026-109730: Integer overflow in the Graphics component (high)
  • CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component (high)
  • CVE-2026-109732: Use-after-free in the DOM: Streams component (high)
  • CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component (high)
  • CVE-2026-109734: Mitigation bypass in the DOM: Security component (moderate)
  • CVE-2026-109736: Frame poisoning in the Layout component (moderate)
  • CVE-2026-109737: Mitigation bypass in the Enterprise Policies component (moderate)
  • CVE-2026-109738: Use-after-free in the Audio/Video: Playback component (moderate)
  • CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component (moderate)
  • CVE-2026-109741: Use-after-free in the Storage: Bucket File System component (moderate)
  • CVE-2026-109742: Information disclosure in the PDF Viewer component (moderate)
  • CVE-2026-109743: Privilege escalation in the Panning and Zooming component (moderate)
  • CVE-2026-109744: Other issue in the DOM: File component (moderate)
  • CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component (moderate)
  • CVE-2026-109782: Mitigation bypass in the File Handling component (moderate)
  • CVE-2026-109751: Information disclosure in the Networking component (moderate)
  • CVE-2026-109752: Use-after-free in the DOM: Workers component (moderate)
  • CVE-2026-109753: Incorrect boundary conditions in the Layout component (moderate)
  • CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component (moderate)
  • CVE-2026-109756: Privilege escalation in the DOM: Navigation component (moderate)
  • CVE-2026-109757: Sandbox escape due to race condition in the Networking component (moderate)
  • CVE-2026-109759: Site isolation issue in the Networking component (moderate)
  • CVE-2026-109760: Mitigation bypass in the Networking: HTTP component (moderate)
  • CVE-2026-109762: Incorrect boundary conditions in the SVG component (moderate)
  • CVE-2026-109763: Mitigation bypass in the File Handling component (moderate)
  • CVE-2026-109764: Mitigation bypass in the Enterprise Policies component (moderate)
  • CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component (moderate)
  • CVE-2026-109766: Mitigation bypass in the Enterprise Policies component (moderate)
  • CVE-2026-109767: Information disclosure in the Networking component (moderate)
  • CVE-2026-109783: Mitigation bypass in the File Handling component (moderate)
  • CVE-2026-109770: Spoofing issue in the DOM: Web Serial component (low)
  • CVE-2026-109775: Denial-of-service in the WebRTC component (low)
  • CVE-2026-109776: Race condition in the XPCOM component (low)
  • CVE-2026-109777: Information disclosure in the Storage: IndexedDB component (low)
  • CVE-2026-109778: Privilege escalation in the WebExtensions component (low)
  • CVE-2026-109781: Denial-of-service in the Printing: Output component (low)

​https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/

comment:2 by Joe Locash, 3 weeks ago

Summary: firefox-153.5.0esr and js-153.5.0 (spidermonkey) → firefox-153.5.0esr

comment:3 by Joe Locash, 3 weeks ago

Milestone: 13.2 → 98-Security
Owner: changed from Joe Locash to SecurityAdvisory
Status: assigned → new

Fixed at de497b4f18. Leaving open for SA.

comment:4 by Bruce Dubbs, 10 days ago

Resolution: → fixed
Status: new → closed

comment:5 by Bruce Dubbs, 10 days ago

Advisory sa-13.1-068 has been issued.

Note: See TracTickets for help on using tickets.