CVE-2026-109715: Mozilla reports a high-severity incorrect boundary conditions flaw in the Firefox JavaScript engine.
No in-the-wild exploitation is confirmed.
The fix ships in Firefox 158. Users should update.
https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/
MozillaSecurity Vulnerabilities fixed in Firefox 158