CVE-2026-100757

A use-after-free vulnerability in the Widget component of Firefox can lead to potential code execution, allowing attackers to exploit the flaw to gain unauthorized access or control over affected systems. Organizations using vulnerable versions of Firefox, particularly those in security-sensitive environments, should prioritize updating to the patched versions: Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, or Firefox ESR 140.17 to mitigate the risk.