PT-2026-33971 · Mozilla · Firefox

Published

2026-04-21

·

Updated

2026-04-21

·

CVE-2026-6785

CVSS v3.1

8.1

High

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.

Fix

Out of bounds Read

Use After Free

Memory Corruption

Weakness Enumeration

Related Identifiers

CVE-2026-6785

Affected Products

Firefox