Critical 2 exploited CVEs DSA-5090-1 2 CVEs

firefox-esr - security update

Published Mar 6, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 10	firefox-esr	91.6.1esr-1~deb10u1
Debian · 11	firefox-esr	91.6.1esr-1~deb11u1

Vulnerabilities 2

Critical 9.6

CVE-2022-26486 Exploited

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We hav…

Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine

Dec 22, 2022
KEV Mar 7, 2022
High 8.8

CVE-2022-26485 Exploited Public exploit EPSS 14%

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of a…

Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine

Dec 22, 2022
KEV Mar 7, 2022