← Back to CVE search

CVE-2026-4716

Firefox

Description

Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.

CVSS 9.1EPSS 0.407%Risk 0.94
View source
Published
2026-03-24 13:16:07
Affected versions
<149
Type
Core software
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H