8.8
High
CVE-2026-92025 Use-after-free in the DOM: Navigation component
Description
Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 156 | earliest → < 156 | 156 |
| Firefox 153.3 | earliest → < 153.3 | 153.3 |
| Firefox 140.16 | earliest → < 140.16 | 140.16 |
| Firefox 115.41 | earliest → < 115.41 | 115.41 |
| Thunderbird 156 | earliest → < 156 | 156 |
| Thunderbird 153.3 | earliest → < 153.3 | 153.3 |
| Thunderbird 140.16 | earliest → < 140.16 | 140.16 |