CVE-2026-92012
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown
Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.
cve-program · CVE-2026-92012
PublishedPrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-92012 · CVE overview and exploitation status
cve-program · CVE-2026-92012
- https://bugzilla.mozilla.org/show_bug.cgi?id=2058069
- https://www.mozilla.org/security/advisories/mfsa2026-90/
- https://www.mozilla.org/security/advisories/mfsa2026-91/
- https://www.mozilla.org/security/advisories/mfsa2026-92/
- https://www.mozilla.org/security/advisories/mfsa2026-93/
- https://www.mozilla.org/security/advisories/mfsa2026-94/
- https://www.mozilla.org/security/advisories/mfsa2026-95/
- https://www.mozilla.org/security/advisories/mfsa2026-96/
This historical advisory does not include today's related changes. Open the latest advisory to find current connections.