Privilege Escalation in CanvasWebGL Component of Firefox by Mozilla

CVE-2026-92052

What is CVE-2026-92052?

This vulnerability arises from uninitialized memory within the Graphics: CanvasWebGL component, leading to a potential privilege escalation scenario. The flaw allows attackers to potentially exploit this weakness to gain elevated permissions within the affected system. Firefox versions below 156 and Firefox ESR versions below 153.3 have been identified as vulnerable. Promptly upgrading to the latest versions is crucial to ensure system security.

References