Memory Safety Vulnerabilities in Firefox and Thunderbird by Mozilla
CVE-2026-5735

Currently unrated

Key Information:

Vendor

Mozilla

Vendor
CVE Published:
7 April 2026

What is CVE-2026-5735?

Mozilla's Firefox and Thunderbird versions 149.0.1 are impacted by memory safety bugs that may lead to memory corruption. These vulnerabilities pose a risk of potential arbitrary code execution, which can significantly compromise the affected systems. Users are urged to update to version 149.0.2 or later to mitigate these risks. For further details, refer to the Mozilla security advisories and bug reports.

Affected Version(s)

Firefox < 149.0.2

Thunderbird < 149.0.2

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Brian Grinstead, Christian Holler and the Mozilla Fuzzing Team
.