NewsEditorialSource: Mozilla

Mozilla fixes 17 Firefox ESR 115.43 vulnerabilities, including a sandbox escape

Mozilla announced fixes for 17 vulnerabilities in Firefox ESR 115.43 on October 13, 2026, including a high-severity sandbox escape. Its advisory rates 16 vulnerabilities high and one moderate. Mozilla says the sandbox escape, CVE-2026-109712, stems from uninitialized memory in the graphics component. Other fixes address access to freed memory in IndexedDB and text graphics, JavaScript boundary-checking defects, and a WebGL race condition.

By News DeskPublished here Wed, Oct 14, 2026, 12:25 AM UTC (UTC)

Image published by Mozilla — Image: Mozilla (Publisher press kit)

Why it matters

Developers and operations teams running Firefox ESR 115 should prioritize updating to 115.43, restart browser processes, and verify the running version. Routine regression checks should cover representative IndexedDB, graphics and JavaScript workflows. Mozilla’s advisory does not establish active exploitation, exploit availability or a complete remote-compromise chain; independent verification remains incomplete.

Attribution

Sources

1MozillaSecurity Vulnerabilities fixed in Firefox ESR 115.43Source published Tue, Oct 13, 2026, 12:00 AM UTC (UTC)

Read the original source for full details and context.