Uninitialized Memory Vulnerability in Firefox WebGPU Component
CVE-2026-100806

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 29 September 2026

What is CVE-2026-100806?

The vulnerability arises from uninitialized memory in the WebGPU component of Firefox, which could lead to potential data leakage or unexpected behaviors. Mozilla has addressed this issue in Firefox ESR 153.4 and Firefox 157, emphasizing the importance of timely updates to maintain system integrity.

Affected Version(s)

Firefox 153.4

Firefox 157

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2060408

https://www.mozilla.org/security/advisories/mfsa2026-100/

https://www.mozilla.org/security/advisories/mfsa2026-97/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 29, 2026
Vulnerability Reserved
Sep 26, 2026

Credit

Mozilla

CVE-2026-100806 Data

JSON