EUVD-2026-24125
GHSA-fcrv-8vh3-4pg3
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionNVD
Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.
AnalysisAI
Memory corruption in Firefox 149 and Thunderbird 149 enables remote code execution when users interact with malicious web content. Mozilla patched 55 distinct memory safety bugs in Firefox 150, some demonstrating memory corruption that could be weaponized for arbitrary code execution. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Audit all organizational Firefox 149 and Thunderbird 149 deployments and disable auto-update if present to prevent uncontrolled upgrades. Within 7 days: Distribute communication recommending users avoid untrusted websites and disable JavaScript as interim mitigation, and establish upgrade timeline to Firefox 150+ once Mozilla releases the patch. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today