CVE-2026-5732

| EUVD-2026-19611 HIGH
2026-04-07 mozilla GHSA-mj57-mxq8-qvw9
8.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
Analysis Generated
Apr 07, 2026 - 13:00 vuln.today
EUVD ID Assigned
Apr 07, 2026 - 13:00 euvd
EUVD-2026-19611
CVE Published
Apr 07, 2026 - 12:43 nvd
HIGH 8.8

Tags

Mozilla Integer Overflow Buffer Overflow

Description

Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability affects Firefox < 149.0.2 and Firefox ESR < 140.9.1.

Analysis

Integer overflow in Firefox and Firefox ESR text rendering engine allows remote attackers to achieve arbitrary code execution via specially crafted web content. Affects Firefox versions prior to 149.0.2 and Firefox ESR prior to 140.9.1. …

Sign in for full analysis, threat intelligence, and remediation guidance.

Remediation

Within 24 hours: Inventory all Firefox and Firefox ESR installations across the organization and disable or restrict internet access for systems running versions prior to Firefox 149.0.2 or Firefox ESR 140.9.1. Within 7 days: Mandate immediate upgrade to Firefox 149.0.2 or Firefox ESR 140.9.1 for all users; deploy via patch management system with rollout prioritizing internet-facing and high-privilege accounts. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Priority Score

44
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +44
POC: 0

Share

CVE-2026-5732 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy