Is Firefox affected by EUVD-2026-14835?

Organizations using the Audio/Video component. This vulnerability affects Firefox face critical risk from CVE-2026-4710, a buffer overflow vulnerability rated CVSS 9.8. Exploitation could allow attackers to corrupt memory, crash the application, or potentially execute arbitrary code.

EUVD-2026-14835

Q: How to fix EUVD-2026-14835?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Monitor vendor channels for patch availability.

| CVE-2026-4710 CRITICAL

2026-03-24 mozilla

9.8

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch Released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 24, 2026 - 12:45 vuln.today

EUVD ID Assigned

Mar 24, 2026 - 12:45 euvd

EUVD-2026-14835

CVE Published

Mar 24, 2026 - 12:30 nvd

CRITICAL 9.8

Description

Incorrect boundary conditions in the Audio/Video component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.

Analysis

An incorrect boundary conditions vulnerability exists in Firefox and Firefox ESR's Audio/Video component that enables information disclosure attacks. Firefox versions below 149 and Firefox ESR versions below 140.9 are affected. …

Remediation

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Monitor vendor channels for patch availability.

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.0

CVSS: +49

POC: 0

Vendor Status

Debian

firefox

Release	Status	Fixed Version	Urgency
sid	vulnerable	148.0.2-1	-
(unstable)	fixed	(unfixed)	-

firefox-esr

Release	Status	Fixed Version	Urgency
bullseye	vulnerable	115.14.0esr-1~deb11u1	-
bullseye (security)	vulnerable	140.8.0esr-1~deb11u1	-
bookworm	vulnerable	128.14.0esr-1~deb12u1	-
bookworm (security)	vulnerable	140.8.0esr-1~deb12u1	-
trixie (security), trixie	vulnerable	140.8.0esr-1~deb13u1	-
forky, sid	vulnerable	140.8.0esr-1	-
(unstable)	fixed	(unfixed)	-

EUVD-2026-14835 vulnerability details – vuln.today

Back

EUVD-2026-14835

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Analysis

Full analysis requires sign-in

Priority Score

Vendor Status

Debian

Share

EUVD-2026-14835

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Full analysis requires sign-in

Priority Score

Vendor Status

Debian

Share

External POC / Exploit Code