CVE-2026-84131highCWE-763

CVE-2026-84131: fallo de gravedad alta en Mozilla Firefox

Privilege escalation due to invalid pointer in the Graphics component

Publicada el 01 sep 2026 · Actualizada el 02 sep 2026

Seguir esta CVE + Monitorear Firefox + Monitorear Thunderbird

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.8epss 0.3%

Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Mozilla · Firefox Mozilla · Thunderbird

CVEs relacionadas — Mozilla Firefox

En el mismo producto, de las más peligrosas a las menos.

CVE-2016-9079HIGHCVE-2016-9079EPSS 87.4%KEV CVE-2019-11708CRITICALCVE-2019-11708EPSS 55.9%KEV CVE-2019-17026HIGHCVE-2019-17026EPSS 46.3%KEV CVE-2019-11707HIGHCVE-2019-11707EPSS 38.0%KEV CVE-2024-9680CRITICALCVE-2024-9680EPSS 23.2%KEV CVE-2022-26485HIGHCVE-2022-26485EPSS 14.3%KEV

Referencias

https://bugzilla.mozilla.org/show_bug.cgi?id=2060008 https://www.mozilla.org/security/advisories/mfsa2026-82/https://www.mozilla.org/security/advisories/mfsa2026-83/https://www.mozilla.org/security/advisories/mfsa2026-84/https://www.mozilla.org/security/advisories/mfsa2026-85/https://www.mozilla.org/security/advisories/mfsa2026-86/https://www.mozilla.org/security/advisories/mfsa2026-87/https://www.mozilla.org/security/advisories/mfsa2026-88/