- 244/2026
- Critical
Mozilla has released security updates to address several vulnerabilities fixed in Firefox 153, Firefox ESR 140.13, and Firefox ESR 115.38.
The addressed vulnerabilities could allow the attacker to gain elevated privileges, bypass security restrictions, obtain sensitive information, conduct denial-ofservice attacks, trigger memory corruption, perform spoofing and clickjacking attacks, execute arbitrary code, or gain access to the affected system.
Sample of the addressed vulnerabilities:
1. Mozilla Firefox Memory Safety Bugs Vulnerability (CVE-2026-16361):
- CVSS: 9.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Remote Code Execution
2. Mozilla Firefox Mitigation Bypass in the DOM: Security Component Vulnerability (CVE-2026-16394):
- CVSS: 9.1
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Security Bypass
Vulnerabilities
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.