EUVD-2026-24093
GHSA-5wvf-8jjj-7w99
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Lifecycle Timeline
4DescriptionNVD
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.
AnalysisAI
Remote code execution or information disclosure in Mozilla Firefox's WebRTC component allows network-based attackers to trigger memory corruption through incorrect boundary checks (CWE-119 buffer overflow class). All Firefox versions prior to 150, ESR versions prior to 115.35, and ESR versions prior to 140.10 are vulnerable. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all Firefox deployments and identify machines running versions prior to 150 (standard) and 115.35 or 140.10 (ESR). Within 7 days: Deploy Firefox 150 or latest available patch version to all standard Firefox installations; deploy ESR 115.35 or ESR 140.10 or later to all ESR deployments. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today