## This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.8.0 ESR (MFSA 2026-15) (bsc#1258568): * CVE-2026-2757: Incorrect boundary conditions in the WebRTC: Audio/Video component * CVE-2026-2758: Use-after-free in the JavaScript: GC component * CVE-2026-2759: Incorrect boundary conditions in the Graphics: ImageLib component * CVE-2026-2760: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component * CVE-2026-2761: Sandbox escape in the Graphics: WebRender component * CVE-2026-2762: Integer overflow in the JavaScript: Standard Library component * CVE-2026-2763: Use-after-free in the JavaScript Engine component * CVE-2026-2764: JIT miscompilation, use-after-free in the JavaScript Engine: JIT component
* bsc#1258568
Cross-
* CVE-2026-2757
* CVE-2026-2758
* CVE-2026-2759
* CVE-2026-2760
* CVE-2026-2761
* CVE-2026-2762
* CVE-2026-2763
* CVE-2026-2764
* CVE-2026-2765
* CVE-2026-2766
* CVE-2026-2767
* CVE-2026-2768
* CVE-2026-2769
* CVE-2026-2770
* CVE-2026-2771
* CVE-2026-2772
* CVE-2026-2773
* CVE-2026-2774
* CVE-2026-2775
* CVE-2026-2776
* CVE-2026-2777
* CVE-2026-2778
* CVE-2026-2779
* CVE-2026-2780
* CVE-2026-2781
* CVE-2026-2782
* CVE-2026-2783
* CVE-2026-2784
* CVE-2026-2785
* CVE-2026-2786
* CVE-2026-2787
* CVE-2026-2788
* CVE-2026-2789
* CVE-2026-2790
* CVE-2026-2791
* CVE-2026-2792
* CVE-2026-2793
CVSS scores:
* CVE-2026-2757 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
* CVE-2026-2757 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Get the latest Linux and open source security news straight to your inbox.