CVE-2026-84131
High · 8.8CVSS
8.8
EPSS
0.3%
Published
Sep 1, 2026
CISA due date
—
The record
Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-112893 Pillow is a Python imaging library. CWE-763
- CVE-2026-98160 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs… CWE-763
- CVE-2026-74860 A flaw was found in libxml2 with Python bindings enabled. CWE-763
- CVE-2023-20511 Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a… CWE-763
- CVE-2026-19315 A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a… CWE-763
- CVE-2026-74947 Privilege escalation due to invalid pointer in the Graphics component. CWE-763
- CVE-2026-57248 When the application opens a PDF file and JavaScript writes annotation attributes, there… CWE-763
- CVE-2026-9516 Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM… CWE-763