PT-2026-27425 · Mozilla · Firefox+2

Cody · Published 2026-03-24 · Updated 2026-03-29 · CVE-2026-4727

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Thunderbird versions prior to 149

Description A denial-of-service issue exists within the Libraries component of NSS. This flaw could potentially disrupt normal operations.

Recommendations Update Firefox to version 149 or later. Update Thunderbird to version 149 or later.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2026-4727

OPENSUSE-SU-2026:10458-1

Affected Products

Firefox

Nss

Thunderbird

References · 61

• https://cve.org/CVERecord?id=CVE-2026-4727 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4727 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2026-23 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2026-20/#CVE-2026-4727 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/730265 · Security Note
• https://mozilla.org/security/advisories/mfsa2026-23 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2026-20 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-4727 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10458-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4727 · Security Note
• https://mozilla.org/security/advisories/mfsa2026-20 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-4727 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-4714 · Note
• https://suse.com/security/cve/CVE-2026-4700 · Note
• https://suse.com/security/cve/CVE-2026-4728 · Note