PT-2026-27421 · Mozilla · Thunderbird+1

Alex Gaynor + 6 · Publicado 2026-03-24 · Atualizado 2026-03-29 · CVE-2026-4723

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Thunderbird versions prior to 149

Description A use-after-free issue exists in the JavaScript Engine component. This condition may allow for unexpected behavior.

Recommendations Update Firefox to version 149 or later. Update Thunderbird to version 149 or later.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2026-4723

OPENSUSE-SU-2026:10458-1

Produtos afetados

Firefox

Thunderbird

Referências · 62

• https://suse.com/security/cve/CVE-2026-4696 · Nota
• https://suse.com/security/cve/CVE-2026-4716 · Nota
• https://suse.com/security/cve/CVE-2026-4694 · Nota
• https://twitter.com/VulmonFeeds/status/2036552011097768136 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-4698 · Nota
• https://suse.com/security/cve/CVE-2026-4721 · Nota
• https://mozilla.org/en-US/security/advisories/mfsa2026-20/#CVE-2026-4723 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-4723 · Nota
• https://suse.com/security/cve/CVE-2026-4699 · Nota
• https://suse.com/security/cve/CVE-2026-4727 · Nota
• https://suse.com/security/cve/CVE-2026-4706 · Nota
• https://suse.com/security/cve/CVE-2026-4691 · Nota
• https://suse.com/security/cve/CVE-2026-4707 · Nota
• https://suse.com/security/cve/CVE-2026-4688 · Nota
• https://suse.com/security/cve/CVE-2026-4693 · Nota