Vulnerability in Mozilla Firefox

CVE-2026-4723

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

EPSS: 0.000 (6.6th percentile) — read the EPSS interpretation.

Affected products

Mozilla Firefox — versions 149
Mozilla Thunderbird — versions 149

References