PT-2026-21727 · Mozilla · Firefox+1

Stevej + 1 · Publicado 2026-02-24 · Atualizado 2026-03-01 · CVE-2026-2794

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148

Description An information disclosure issue exists in Firefox and Firefox Focus for Android due to uninitialized memory. This can potentially allow an attacker to access sensitive information.

Recommendations Update Firefox to version 148 or later.

Correção

Use of Uninitialized Resource

Enumeração de Fraquezas

CWE-908

Identificadores relacionados

CVE-2026-2794

OPENSUSE-SU-2026:10257-1

Produtos afetados

Firefox

Firefox Focus

Referências · 63

• https://twitter.com/CVEnew/status/2026298478888955957 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-2786 · Nota
• https://suse.com/security/cve/CVE-2026-2759 · Nota
• https://suse.com/security/cve/CVE-2026-2790 · Nota
• https://suse.com/security/cve/CVE-2026-2760 · Nota
• https://suse.com/security/cve/CVE-2026-2795 · Nota
• https://suse.com/security/cve/CVE-2026-2766 · Nota
• https://suse.com/security/cve/CVE-2026-2775 · Nota
• https://suse.com/security/cve/CVE-2026-2803 · Nota
• https://suse.com/security/cve/CVE-2026-2806 · Nota
• https://suse.com/security/cve/CVE-2026-2796 · Nota
• https://ubuntu.com/security/CVE-2026-2794 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-2800 · Nota
• https://suse.com/security/cve/CVE-2026-2799 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=2008365 · Nota