Memory Safety Vulnerability in Firefox and Thunderbird by Mozilla
CVE-2026-2792

Currently unrated

Key Information:

Vendor

Mozilla

Vendor
CVE Published:
24 February 2026

What is CVE-2026-2792?

The vulnerability involves memory safety bugs in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147, and Thunderbird 147. These bugs exhibit signs of memory corruption, suggesting that with appropriate exploitation efforts, they could potentially lead to arbitrary code execution. Users of versions prior to Firefox 148 and Thunderbird 148, as well as their respective ESR versions, should take immediate action to update and secure their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Firefox < 148

Firefox ESR < 140.8

Thunderbird < 148

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrew McCreight, Maurice Dauer, Olli Pettay, Ryan Hunt
.