Memory Safety Vulnerability in Firefox ESR by Mozilla

CVE-2026-16361

What is CVE-2026-16361?

Memory safety bugs have been identified in Firefox ESR versions 115.37 and 140.12, which are characterized by evidence of memory corruption. These vulnerabilities present a risk as they could potentially be exploited to execute arbitrary code, given sufficient effort by an attacker. Mozilla has addressed these concerns in the recent updates, specifically with the releases of Firefox ESR 115.38 and 140.13, which aim to mitigate the risks associated with these memory safety issues.

References