Memory Safety Vulnerabilities in Firefox ESR and Firefox Products
CVE-2026-16412

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 21 July 2026

What is CVE-2026-16412?

Mozilla Firefox ESR version 140.12 and Firefox version 152 contain memory safety bugs that could lead to memory corruption. If successfully exploited, these vulnerabilities might allow an attacker to execute arbitrary code on the affected systems. Mozilla has addressed these issues in Firefox version 153 and Firefox ESR version 140.13, providing users with important security updates to mitigate these risks.

Affected Version(s)

Firefox 140.13

Firefox 153

References

https://bugzilla.mozilla.org/buglist.cgi?bug_id=2005113%2...

https://bugzilla.mozilla.org/buglist.cgi?bug_id=2043035%2...

https://bugzilla.mozilla.org/buglist.cgi?bug_id=2045413%2...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 21, 2026
Vulnerability Reserved
Jul 20, 2026

Credit

Christian Holler, Frederik Braun, Justin Link, Simon Friedberger, Tom Ritter, Tom Schuster and the Mozilla Fuzzing Team

CVE-2026-16412 Data

JSON