Use-After-Free Vulnerability in Mozilla Firefox and ESR Products

CVE-2026-100791

What is CVE-2026-100791?

A use-after-free vulnerability exists in the DOM handling of Mozilla Firefox and its Extended Support Release (ESR) versions. This flaw can potentially allow attackers to exploit the browser’s memory management leading to security risks. The affected versions of Firefox are vulnerable and have received updates that fix this critical issue, ensuring improved security for users. Users are strongly advised to update to the latest versions to mitigate these risks.

References