Race Condition and Use-After-Free in Firefox by Mozilla
CVE-2026-100805

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 29 September 2026

What is CVE-2026-100805?

A race condition and use-after-free vulnerability has been identified in the Audio/Video component of Firefox. This issue can lead to potentially exploitable conditions, allowing attackers to disrupt the application or execute arbitrary code. The vulnerability was addressed in version 157 of Firefox. Users are encouraged to update their browsers to mitigate potential risks and enhance their security.

Affected Version(s)

Firefox 157

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2058785

https://www.mozilla.org/security/advisories/mfsa2026-97/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 29, 2026
Vulnerability Reserved
Sep 26, 2026

Credit

Hyeonjun Ahn

CVE-2026-100805 Data

JSON