CVE-2026-92032 is a vulnerability in Mozilla Firefox
Published on September 15, 2026
Sandbox escape due to invalid pointer in the Graphics component
Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, and Firefox ESR 153.3.
Products Associated with CVE-2026-92032
Want to know whenever a new CVE is published for Mozilla Firefox? stack.watch will email you.
Affected Versions
Mozilla Firefox:- Version 140.16, <= 140.* is unaffected.
- Version 153.3, <= 153.* is unaffected.
- Version 156, <= * is unaffected.