CVE-2026-100790

A use-after-free vulnerability in the XSLT component of Firefox can lead to potential code execution, allowing attackers to exploit the flaw for malicious purposes. Users of affected Firefox versions should prioritize updating to the fixed releases—Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, or Firefox ESR 140.17—to mitigate the risk of exploitation. Organizations relying on Firefox for their operations should take immediate action to ensure their browsers are up to date.