CVE-2026-5731
CRITICALMemory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
Title source: cnaDescription
Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.
References (33)
Core 33
Core References
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:11805
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:11813
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:12264
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13342
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13412
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13533
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13582
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13583
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13596
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13600
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13665
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13682
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13683
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13922
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13977
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:14223
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:14303
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:15889
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:7671
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:7672
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:8052
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:8459
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:9345
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:9638
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-5731
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2455901
Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2
https://bugzilla.mozilla.org/buglist.cgi?bug_id=2021894%2C2022225%2C2022252%2C2022294%2C2023007%2C2023130%2C2023191%2C2023364%2C2023829%2C2024074%2C2024417%2C2024433%2C2024436%2C2024437%2C2024453%2C2024461%2C2024462%2C2024472%2C2024474%2C2024477%2C2025364%2C2025401%2C2025402%2C2025472%2C2026287%2C2026299%2C2026305%2C2026426
Scores
CVSS v3
9.8
EPSS
0.0034
EPSS Percentile
26.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-119
CWE-787
Status
published
Products (15)
mozilla/firefox
115.34.0
mozilla/firefox
140.9.0
mozilla/firefox
149.0.1
Mozilla/Firefox
115.34.1 - 115.*
Mozilla/Firefox
140.9.1 - 140.*
Mozilla/Firefox
149.0.2
Mozilla/Firefox
unspecified - 149.0.2
Mozilla/Firefox ESR
unspecified - 115.34.1
Mozilla/Firefox ESR
unspecified - 140.9.1
mozilla/thunderbird
140.9.0
... and 5 more
Published
Apr 07, 2026
Tracked Since
Apr 07, 2026