PatchGap
Firefox · Widget

CVE-2026-92079

Logic Error in Widget
Low firefox Logic Error 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactlow
DescriptionMitigation bypass in the Widget: Win32 component
ComponentWidget
Bug ClassLogic Error
Tracker2067531
Fix commit450c828452dd (firefox) +8/-0
CISA KEVNot listed
Creditedbarbarossa404
Disclosed2026-09-15

Files Changed

  • browser/installer/package-manifest.in
  • taskcluster/scripts/misc/build-WindowsAppSDK.sh
  • toolkit/content/license.html
  • widget/windows/moz.build

Patch

view commit
diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in
index 9944fbec402..46725ca0498 100644
--- a/browser/installer/package-manifest.in
+++ b/browser/installer/package-manifest.in
@@ -113,6 +113,8 @@
 @BINPATH@/@[email protected]@DLL_SUFFIX@
 @BINPATH@/@[email protected]@DLL_SUFFIX@
 @BINPATH@/@[email protected]@DLL_SUFFIX@
+@BINPATH@/@[email protected]@DLL_SUFFIX@
+@BINPATH@/@[email protected]@DLL_SUFFIX@
 #endif
 #ifdef MOZ_GTK
 ; This is a standalone binary launched by Firefox on Linux to verify
diff --git a/taskcluster/scripts/misc/build-WindowsAppSDK.sh b/taskcluster/scripts/misc/build-WindowsAppSDK.sh
index 41569781e8f..1779395c87b 100755
--- a/taskcluster/scripts/misc/build-WindowsAppSDK.sh
+++ b/taskcluster/scripts/misc/build-WindowsAppSDK.sh
@@ -20,6 +20,8 @@ cp Microsoft.UI.Composition.OSSupport.dll $target_folder_name
 cp Microsoft.UI.Input.dll $target_folder_name
 cp Microsoft.UI.Windowing.Core.dll $target_folder_name
 cp Microsoft.UI.Windowing.dll $target_folder_name
+cp Microsoft.WindowsAppRuntime.dll $target_folder_name
+cp Microsoft.WindowsAppRuntime.Insights.Resource.dll $target_folder_name
 
 mkdir -p $UPLOAD_DIR
 
diff --git a/toolkit/content/license.html b/toolkit/content/license.html
index 9d859c0e92a..81cd629fc9a 100644
--- a/toolkit/content/license.html
+++ b/toolkit/content/license.html
@@ -4153,6 +4153,8 @@ product.
               <li>Microsoft.UI.Input.dll</li>
               <li>Microsoft.UI.Windowing.Core.dll</li>
               <li>Microsoft.UI.Windowing.dll</li>
+              <li>Microsoft.WindowsAppRuntime.dll</li>
+              <li>Microsoft.WindowsAppRuntime.Insights.Resource.dll</li>
 #ifdef ONNX_RUNTIME
               <li>onnxruntime.dll</li>
 #endif
diff --git a/widget/windows/moz.build b/widget/windows/moz.build
index 72d719b766d..035e7732ddc 100644
--- a/widget/windows/moz.build
+++ b/widget/windows/moz.build
@@ -241,5 +241,7 @@ if CONFIG["MOZ_WINDOWSAPPSDK_DIR"]:
             "Microsoft.UI.Input.dll",
             "Microsoft.UI.Windowing.Core.dll",
             "Microsoft.UI.Windowing.dll",
+            "Microsoft.WindowsAppRuntime.dll",
+            "Microsoft.WindowsAppRuntime.Insights.Resource.dll",
         )
     ]
Loading diff…
On This Page