Spoofing Vulnerability in Firefox and Firefox ESR by Mozilla
CVE-2026-84137

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 1 September 2026

What is CVE-2026-84137?

A spoofing issue has been identified in the DOM: Core & HTML component of Firefox, which could allow an attacker to manipulate the display of web content. This vulnerability has been addressed in Firefox version 155 and Firefox ESR version 153.2. Users are encouraged to update their browsers to enhance security and protect against potential threats.

Affected Version(s)

Firefox 153.2

Firefox 155

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2051146

https://www.mozilla.org/security/advisories/mfsa2026-82/

https://www.mozilla.org/security/advisories/mfsa2026-85/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 1, 2026
Vulnerability Reserved
Sep 1, 2026

Credit

Riski Muhammad Ivan

CVE-2026-84137 Data

JSON