← Back to CVE search

CVE-2026-4684

Firefox

Description

Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.

CVSS 7.5EPSS 0.35200000000000004%Risk 0.77
View source
Published
2026-03-24 13:16:04
Affected versions
<149
Type
Core software
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H