Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2026-3846

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 148.0.2.

VectorNETWORK

PublishedMar 10, 2026, 18:19

Published Bysecurity@mozilla.org

Base Score

Score6.5

No affected versions found.

CWE-346

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK