Is Mozilla affected by CVE-2026-5733?

CVE-2026-5733 is a high-severity remote code execution vulnerability in Firefox's WebGPU implementation that affects all versions before 149.0.2, allowing attackers to execute arbitrary code on user systems through malicious web content without requiring authentication.

CVE-2026-5733

Q: How to fix CVE-2026-5733?

Within 24 hours: Identify all Firefox installations in your organization and block access to the vulnerable versions via endpoint management or network controls pending patch deployment. Within 7 days: Deploy Firefox version 149.0.2 or later across all endpoints using automated patch management tools; prioritize systems with elevated access or sensitive data access. Within 30 days: Conduct audit of patch compliance; implement mandatory Firefox auto-update policies and consider blocking non-managed browser instances on corporate networks.

EUVD-2026-19612 HIGH

2026-04-07 mozilla

8.8

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Apr 07, 2026 - 13:00 vuln.today

EUVD ID Assigned

Apr 07, 2026 - 13:00 euvd

EUVD-2026-19612

CVE Published

Apr 07, 2026 - 12:43 nvd

HIGH 8.8

Description

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 149.0.2.

Analysis

Buffer overflow in Firefox WebGPU implementation allows remote code execution when users interact with malicious web content. Affects all Firefox versions prior to 149.0.2. …

Remediation

Within 24 hours: Identify all Firefox installations in your organization and block access to the vulnerable versions via endpoint management or network controls pending patch deployment. Within 7 days: Deploy Firefox version 149.0.2 or later across all endpoints using automated patch management tools; prioritize systems with elevated access or sensitive data access. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.0

CVSS: +44

POC: 0

CVE-2026-5733 vulnerability details – vuln.today

Back

CVE-2026-5733

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Analysis

Full analysis requires sign-in

Priority Score

Share

CVE-2026-5733

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Full analysis requires sign-in

Priority Score

Share

External POC / Exploit Code