CVE-2026-100762

A critical use-after-free vulnerability in the DOM: Content Processes component of Firefox allows for a potential sandbox escape, which could enable an attacker to execute arbitrary code in the context of the browser. Users of affected Firefox versions should prioritize updating to the patched releases (Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17) to mitigate the risk of exploitation. Organizations relying on Firefox for secure browsing should take immediate action to ensure all instances are updated.