Vulnerability details
CVE-2026-6786
Red Hat Enterprise Linux 10
Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150
CVSS 3.1
7.5High
Official description
Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | All | CVEProject cvelistV5 (CNA) |
References and advisories
35- https://bugzilla.mozilla.org/buglist.cgi?bug_id=2010727%2C2019004%2C2019224%2C2019547%2C2020378%2C2022381%2C2022608%2C2022785%2C2023120%2C2023128%2C2023140%2C2023279%2C2023836%2C2023882%2C2023925%2C2023950%2C2023959%2C2023965%2C2024243%2C2024245%2C2024247%2C2024253%2C2024346%2C2024357%2C2024416%2C2024420%2C2024429%2C2024432%2C2024455%2C2024466%2C2024468%2C2024476%2C2024664%2C2024666%2C2024669%2C2024670%2C2024671%2C2024761%2C2024918%2C2025292%2C2025332%2C2025348%2C2025384%2C2025395%2C2025458%2C2025461%2C2025463%2C2025481%2C2025483%2C2025485%2C2025494%2C2025506%2C2025511%2C2025513%2C2025520%2C2026277%2C2026282%2C2026288%2C2026289%2C2026311%2C2026312%2C2026869%2C2027152%2C2027161%2C2027238%2C2027261%2C2027269%2C2027274%2C2027280%2C2027281%2C2027300%2C2027302%2C2027331%2C2027339%2C2027340%2C2027738%2C2027975%2C2028000%2C2028011%2C2028289%2C2028525%2C2028728%2C2028887%2C2028888%2C2028896%2C2029063%2C2029064%2C2029290%2C2029291%2C2029294%2C2029300%2C2029304%2C2029316%2C2029317%2C2029401%2C2029415%2C2029430%2C2029457%2C2029727%2C2029735%2C2029743%2C2029752%2C2029754%2C2029776%2C2029809%2C2030324%2C2030370
- https://www.mozilla.org/security/advisories/mfsa2026-30/
- https://www.mozilla.org/security/advisories/mfsa2026-32/
- https://www.mozilla.org/security/advisories/mfsa2026-33/
- https://www.mozilla.org/security/advisories/mfsa2026-34/
- https://access.redhat.com/security/cve/CVE-2026-6786 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2460088 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6786.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:19704 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17690 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19463 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10767 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12285 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19041 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19131 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10766 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13537 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19655 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19465 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19542 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19466 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17477 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19467 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17687 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19468 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17689 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19461 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19464 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19469 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17688 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19462 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10757 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:15892 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19201 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19348 vendor-advisoryx_refsource_REDHAT
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-04-21
- Last updated
- 2026-07-15
- State
- Published
- Assigner (CNA)
- mozilla
Exploit prediction (EPSS)
0.49%
Probability of exploitation in 30 days
43%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-416Use After Free
- CWE-125Out-of-bounds Read
- CWE-787Out-of-bounds Write