CVE-2026-4729

Critical CVSS: 9.8

Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 149 and Thunderbird < 149.

Vendor

Mozilla

Product

Firefox

CWE

CWE-120

Yayın Tarihi

2026-03-24 13:16:08

Güncelleme

2026-03-25 20:54:55

Source Identifier

security@mozilla.org

KEV Date Added

Kategoriler

CWE-120 Firefox CRITICAL Mozilla 2026

Referanslar

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1944033%2C1997282%2C2009213%2C2011412%2C2021925%2C2022034 https://www.mozilla.org/security/advisories/mfsa2026-20/ https://www.mozilla.org/security/advisories/mfsa2026-23/

Benzer Kayıtlar

Medium

CVE-2026-3889

Spoofing issue in Thunderbird. This vulnerability affects Thunderbird < 149 and Thunderbird < 140.9.

High

CVE-2026-4371

A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside th…

High

CVE-2026-4722

Privilege escalation in the IPC component. This vulnerability affects Firefox < 149 and Thunderbird < 149.

Critical

CVE-2026-4723

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Thunderbird < 149.

Critical

CVE-2026-4724

Undefined behavior in the Audio/Video component. This vulnerability affects Firefox < 149 and Thunderbird < 149.

Critical

CVE-2026-4725

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149 and T…