Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2026-4691

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

VectorNETWORK

PublishedMar 24, 2026, 13:16

Published Bysecurity@mozilla.org

Base Score

Score9.8

Affected Versions

No affected versions found.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2017512
https://www.mozilla.org/security/advisories/mfsa2026-20/
https://www.mozilla.org/security/advisories/mfsa2026-21/
https://www.mozilla.org/security/advisories/mfsa2026-22/
https://www.mozilla.org/security/advisories/mfsa2026-23/
https://www.mozilla.org/security/advisories/mfsa2026-24/

Weakness Type

CWE-416

CVSS Metrics

Base Score

9.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.1

Attack Vector (AV)

NETWORK