Denial-of-Service Vulnerability in Firefox Graphics Component
CVE-2026-100812

6.5MEDIUM

Key Information:

Vendor

Mozilla
Status
Firefox
Thunderbird
Vendor
CVE Published:
29 September 2026

What is CVE-2026-100812?

This vulnerability affects the graphics component in Mozilla Firefox, allowing for a denial-of-service condition that may disrupt user access to the browser. The issue has been addressed in version 153.4 of Firefox ESR and version 157 of Firefox. Ensuring that your software is updated can mitigate the risks associated with this vulnerability.

Affected Version(s)

Firefox 153.4

Firefox 157

Thunderbird 153.4

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2068335
https://www.mozilla.org/security/advisories/mfsa2026-100/
https://www.mozilla.org/security/advisories/mfsa2026-101/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mozilla
.