CVE-2026-100778

Summary

This flaw allows an attacker to escape the sandbox by exploiting a use-after-free vulnerability in the DOM: Core & HTML component, leading to potential code execution.

Exploitability

Exploitation requires specific conditions and is moderately difficult, as it involves precise timing and control over memory management.

Blast radius

If exploited, this could lead to full system compromise, as it allows execution of arbitrary code within the context of the affected application.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, or Firefox ESR 140.17 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.