PT-2026-21727 · Mozilla · Firefox+1

Stevej + 1 · Published 2026-02-24 · Updated 2026-03-01 · CVE-2026-2794

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148

Description An information disclosure issue exists in Firefox and Firefox Focus for Android due to uninitialized memory. This can potentially allow an attacker to access sensitive information.

Recommendations Update Firefox to version 148 or later.

Fix

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2026-2794

OPENSUSE-SU-2026:10257-1

Affected Products

Firefox

Firefox Focus

References · 63

• https://ubuntu.com/security/CVE-2026-2794 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2026-13/#CVE-2026-2794 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-2794 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2026-13 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2794 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10257-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-2794 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-2794 · Security Note
• https://twitter.com/CVEnew/status/2026298478888955957 · Twitter Post
• https://suse.com/security/cve/CVE-2026-2786 · Note
• https://suse.com/security/cve/CVE-2026-2759 · Note
• https://suse.com/security/cve/CVE-2026-2790 · Note
• https://suse.com/security/cve/CVE-2026-2760 · Note
• https://suse.com/security/cve/CVE-2026-2795 · Note
• https://suse.com/security/cve/CVE-2026-2766 · Note