CVE-2026-92051 - Spoofing issue due to invalid pointer in the Graphics component

CRITICAL

Spoofing issue due to invalid pointer in the Graphics component

Published Sep 15, 2026

9.1

CRITICAL

CVSS 3.1

EPSS 0.53%

Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

Link	Providers	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2061393
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-78514		Advisory
https://www.mozilla.org/security/advisories/mfsa2026-90/
https://www.mozilla.org/security/advisories/mfsa2026-94/

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mozilla

Published Sep 15, 2026

Updated Sep 21, 2026

Reserved Sep 15, 2026

Updated Sep 21, 2026

Status Analyzed

Modified Oct 5, 2026

Severity n/a

Public date n/a

Assigner mozilla

Published Sep 15, 2026

Updated Sep 21, 2026

Exploited since n/a