PT-2026-35736 · Mozilla+1 · Firefox+1

C.M. Chang + 3 · Published 2026-04-28 · Updated 2026-05-26 · CVE-2026-7322

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firefox version 150.0.0 Firefox ESR version 140.10.0 Firefox ESR version 115.35.0

Description Memory safety bugs exist that exhibit evidence of memory corruption, which could potentially be exploited to execute arbitrary code.

Recommendations Update Firefox 150.0.0 to version 150.0.1. Update Firefox ESR 140.10.0 to version 140.10.1. Update Firefox ESR 115.35.0 to version 115.35.1.

Fix

DoS

Buffer Overflow

Use After Free

Weakness Enumeration

CWE-119

CWE-416

Related Identifiers

ALSA-2026:19153

ALSA-2026:19157

ALSA-2026:19348

ALSA-2026:19370

ALSA-2026:19588

ALSA-2026:20586

BDU:2026-07460

CVE-2026-7322

OESA-2026-2132

OESA-2026-2133

OESA-2026-2134

OESA-2026-2246

OESA-2026-2275

OPENSUSE-SU-2026:10661-1

OPENSUSE-SU-2026:10668-1

OPENSUSE-SU-2026:10687-1

RHSA-2026:19153

RHSA-2026:19157

RHSA-2026:19348

RHSA-2026:19370

RHSA-2026:19588

Affected Products

Firefox

Rocky Linux

References · 133

• https://mozilla.org/security/advisories/mfsa2026-38 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-8091 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-7322 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2026-36 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:20586 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:19157 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07460 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2026-36/#CVE-2026-7322 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-7322 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:19588 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2026-37 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2026-35 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-7321 · Security Note
• https://osv.dev/vulnerability/ALSA-2026:20586 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-19588.html · Vendor Advisory