Boundary Condition Flaw in Mozilla Firefox Audio/Video Component
CVE-2026-4710

9.8CRITICAL

Key Information:

Vendor: Mozilla
Status: Firefox; Firefox Esr; Thunderbird
Vendor: CVE Published:; 24 March 2026

What is CVE-2026-4710?

A flaw in the boundary conditions within the Audio/Video component of Mozilla Firefox can lead to potential security risks. This affects versions of Firefox prior to 149 and Firefox ESR versions before 140.9.

Affected Version(s)

Firefox < 149

Firefox ESR < 140.9

Thunderbird < 149

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2016370

https://www.mozilla.org/security/advisories/mfsa2026-20/

https://www.mozilla.org/security/advisories/mfsa2026-22/

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 24, 2026
Vulnerability Reserved
Mar 23, 2026

Credit

Sajeeb Lohani

CVE-2026-4710 Data

JSON