Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-92051

Fixed in a distro release EPSS <1%CVSS 9.1

Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

Published 2026-09-15 · CVE record · OSV

Products: Mozilla Firefox, Mozilla Thunderbird

Distro releases

ReleasePackageFixed in
Ubuntu:18.04:LTSmozjs38no fix
Ubuntu:18.04:LTSmozjs52no fix
Ubuntu:20.04:LTSmozjs52no fix
Ubuntu:20.04:LTSmozjs68no fix
Ubuntu:22.04:LTSmozjs102no fix
Ubuntu:22.04:LTSmozjs78no fix
Ubuntu:22.04:LTSmozjs91no fix
Ubuntu:22.04:LTSthunderbirdno fix
Ubuntu:24.04:LTSmozjs102no fix
Ubuntu:24.04:LTSmozjs115no fix
openSUSE:TumbleweedMozillaFirefox156.0-1.1