CVE-2026-100779

A use-after-free vulnerability in the XSLT component of Firefox could allow an attacker to execute arbitrary code, potentially leading to system compromise. Users of affected Firefox versions, particularly those running older releases, should prioritize updating to the fixed versions (Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17) to mitigate this high-severity risk. Organizations relying on Firefox for their operations should ensure all instances are updated promptly to protect against potential exploitation.