Skip to main content

Red Hat EUVDEUVD-2026-14848

| CVE-2026-4716 CRITICAL
Use of Uninitialized Resource (CWE-908)
2026-03-24 mozilla
Information Disclosure Red Hat Mozilla Suse
Critical
Disputed · 9.1 NVD
Share

Severity by source

Sources disagree (Medium–Critical)
NVD PRIMARY
9.1 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
SUSE
CRITICAL
qualitative
Red Hat
6.1 MEDIUM
qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High

Lifecycle Timeline

4
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
EUVD ID Assigned
Mar 24, 2026 - 12:45 euvd
EUVD-2026-14848
Analysis Generated
Mar 24, 2026 - 12:45 vuln.today
CVE Published
Mar 24, 2026 - 12:30 nvd
CRITICAL 9.1

DescriptionCVE.org

Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9.

AnalysisAI

Mozilla Firefox versions below 149 and Firefox ESR below 140.9 contain memory safety flaws in the JavaScript Engine that enable remote code execution and denial of service attacks without user interaction or special privileges. An unauthenticated attacker can exploit improper boundary condition handling and uninitialized memory to achieve high-impact confidentiality violations and system availability disruption. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Craft malicious JavaScript payload
Exploit
Trigger uninitialized memory access in Firefox JavaScript Engine
Execution
Read sensitive data from memory
Impact
Cause denial of service crash
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Remote unauthenticated attacker can exploit via malicious JavaScript code executed in Firefox < 149 or Firefox ESR < 140.9. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Without published CVSS or EPSS scores, risk assessment relies on available context signals. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker crafts a malicious webpage containing specially crafted JavaScript code designed to trigger uninitialized memory reads or out-of-bounds access in the JavaScript Engine. When a vulnerable Firefox user visits this page, the JavaScript executes within the browser context and leaks sensitive memory contents—such as encryption keys, session tokens, or data from other browser tabs—which the attacker exfiltrates via JavaScript side-channel techniques (e.g., timing attacks or direct HTTP requests). …
Remediation Users should immediately update Firefox to version 149 or later, and Firefox ESR users should upgrade to version 140.9 or later. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Identify all affected systems and apply vendor patches immediately. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Mozilla

View all
CVE-2024-4367 HIGH POC
8.8 May 14

Arbitrary JavaScript execution in Mozilla's PDF.js library affects Firefox before 126, Firefox ESR before 115.11, and Th
CVE-2026-4689 CRITICAL POC
10.0 Mar 24

A sandbox escape vulnerability exists in Firefox's XPCOM component due to incorrect boundary conditions and integer over
CVE-2025-4918 CRITICAL POC
9.8 May 17

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. Rated critical severity
CVE-2026-2796 CRITICAL POC
9.8 Feb 24

JIT miscompilation in Firefox WebAssembly before 148. The JIT compiler generates incorrect Wasm code, enabling type conf
CVE-2025-8043 CRITICAL POC
9.8 Jul 22

Firefox and Thunderbird URL truncation flaw enables spoofing attacks by displaying misleading origins in the address bar
CVE-2025-0247 CRITICAL
9.8 Jan 07

Memory safety bugs present in Firefox 133 and Thunderbird 133. Rated critical severity (CVSS 9.8), this vulnerability is
CVE-2025-0665 HIGH POC
7.0 Feb 05

A double-close vulnerability exists in libcurl when tearing down connection channels after threaded name resolution, cau
CVE-2025-1937 HIGH POC
7.5 Mar 04

Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7
CVE-2026-0889 HIGH POC
7.5 Jan 13

Service Workers in Mozilla Firefox and Thunderbird versions below 147 are vulnerable to remote denial-of-service attacks
CVE-2025-3028 MEDIUM POC
6.5 Apr 01

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. Rated mediu
CVE-2025-1015 MEDIUM
5.4 Feb 04

The Thunderbird Address Book URI fields contained unsanitized links. Rated medium severity (CVSS 5.4), this vulnerabilit
CVE-2026-2761 CRITICAL
10.0 Feb 24

Second sandbox escape in Firefox WebRender component. CVSS 10.0 — independent path from CVE-2026-2760 to escape the cont

Same weakness CWE-908 – Use of Uninitialized Resource

View all
CVE-2011-1255 CRITICAL POC
9.3
CVE-2024-12085 HIGH POC
7.5
CVE-2026-58051 HIGH POC
8.3
CVE-2025-1942 CRITICAL
9.8
CVE-2026-42969 MEDIUM
5.5
CVE-2026-53225 CRITICAL
9.1
CVE-2026-2806 CRITICAL
9.1
CVE-2026-4715 CRITICAL
9.1

Same technique Information Disclosure

View all
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2014-6324 HIGH POC
8.8
CVE-2017-0213 HIGH POC
7.3
CVE-2016-7255 HIGH POC
7.8
CVE-2010-0232 HIGH POC
7.8
CVE-2025-30066 HIGH POC
8.6
CVE-2025-54236 CRITICAL POC
9.1

Vendor StatusVendor

Debian

firefox
Release Status Fixed Version Urgency
sid vulnerable 148.0.2-1 -
(unstable) fixed (unfixed) -
firefox-esr
Release Status Fixed Version Urgency
bullseye vulnerable 115.14.0esr-1~deb11u1 -
bullseye (security) vulnerable 140.8.0esr-1~deb11u1 -
bookworm vulnerable 128.14.0esr-1~deb12u1 -
bookworm (security) vulnerable 140.8.0esr-1~deb12u1 -
trixie (security), trixie vulnerable 140.8.0esr-1~deb13u1 -
forky, sid vulnerable 140.8.0esr-1 -
(unstable) fixed (unfixed) -

SUSE

Severity: Critical
Product Status
Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP6-SAP-Azure-LI-BYOS Image SLES15-SP6-SAP-Azure-LI-BYOS-Production Image SLES15-SP6-SAP-Azure-VLI-BYOS Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production Image SLES15-SP7-SAP-Azure-LI-BYOS-Production Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production Affected
SUSE Liberty Linux 10 Fixed
SUSE Liberty Linux 8 Fixed
SUSE Liberty Linux 9 Fixed
SUSE Linux Enterprise Desktop 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7 Fixed

Share

EUVD-2026-14848 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy