CVE-2026-100812

Analyzed Analyzed - Analysis Complete

Graphics Component Denial-of-Service in Firefox

Publication date: 2026-09-29

Last updated on: 2026-10-05

Assigner: Mozilla Corporation

Description

Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-10-05

Generated

2026-10-19

AI Q&A

2026-09-29

EPSS Evaluated

2026-10-18

NVD

CVE-2026-100812

EUVD

EUVD-2026-88791

Affected Vendors & Products

Vendor	Product	Version / Range
mozilla	firefox	to 153.4.0 (exc)
mozilla	firefox	From 154.0.0 (inc) to 157.0.0 (exc)
mozilla	thunderbird	to 153.4.0 (exc)
mozilla	thunderbird	From 154.0 (inc) to 157.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

This is a denial-of-service vulnerability in the Graphics component of Firefox. It can cause the application to crash or become unresponsive by exploiting flaws in how graphics are processed.

Detection Guidance

Detection methods are not specified in the provided CVE details. Monitor Firefox processes for crashes or high resource usage after updating to versions below Firefox ESR 153.4 or Firefox 157. Check Mozilla security advisories for additional indicators.

Impact Analysis

If exploited, this vulnerability could allow an attacker to make your Firefox browser crash repeatedly, disrupting your ability to use it. It may also lead to system instability if the browser consumes excessive resources during the attack.

Compliance Impact

This vulnerability is a denial-of-service issue in the Graphics component of Firefox. It could potentially disrupt services, but there is no direct evidence in the provided text linking it to compliance impacts on GDPR or HIPAA.

Mitigation Strategies

Update Firefox ESR to version 153.4 or Firefox to version 157 or later to address the denial-of-service vulnerability in the Graphics component.

Hi! I’m here to help you understand CVE-2026-100812. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70