Race Condition and Use-After-Free in Firefox Graphics Text Component
CVE-2026-109765

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 13 October 2026

What is CVE-2026-109765?

This vulnerability involves a race condition and use-after-free issue within the Graphics: Text component of Firefox. Attackers can exploit this flaw to potentially cause unexpected behavior or to execute arbitrary code. Mozilla has addressed this vulnerability in Firefox version 158 and Firefox ESR version 153.5, emphasizing the importance of keeping browsers updated to mitigate security risks.

Affected Version(s)

Firefox 153.5

Firefox 158

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2073396

https://www.mozilla.org/security/advisories/mfsa2026-106/

https://www.mozilla.org/security/advisories/mfsa2026-108/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 13, 2026
Vulnerability Reserved
Oct 13, 2026

Credit

Shu Takahashi of Velcore Consulting Inc.

CVE-2026-109765 Data

JSON