CVE-2026-92051
published 2026-09-15CVE-2026-92051: Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
PriorityP346critical9.1CVSS 3.1
AVNACLPRNUINSUCNIHAH
EPSS
0.53%
43.3th percentile
Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | < Firefox 156 | Firefox 156 |
| mozilla | firefox | < 156.0.0 | 156.0.0 |
| mozilla | thunderbird | < Thunderbird 156 | Thunderbird 156 |
| mozilla | thunderbird | < 156.0 | 156.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Spoofing issue due to invalid pointer in the Graphics component.
ghsa_unreviewed·2026-09-15
CVE-2026-92051 Spoofing issue due to invalid pointer in the Graphics component.
Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156.
Mozilla
Mozilla Foundation Security Advisory 2026-94: CVE-2026-92051
vendor_mozilla
CVE-2026-92051 Mozilla Foundation Security Advisory 2026-94: CVE-2026-92051
Mozilla Foundation Security Advisory 2026-94
CVE: CVE-2026-92051
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 156
Mozilla
Mozilla Foundation Security Advisory 2026-90: CVE-2026-92051
vendor_mozilla
CVE-2026-92051 Mozilla Foundation Security Advisory 2026-90: CVE-2026-92051
Mozilla Foundation Security Advisory 2026-90
CVE: CVE-2026-92051
Product: Firefox
Impact: low
Fixed in: Firefox 156
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-15
Published