CVE-2026-2792

CriticalCVSS 9.8/10Last modified Jul 15, 2026

Description

Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Feb 24, 2026
Last modified: Jul 15, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-279207.8Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges loca CVE-2026-279217.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker CVE-2026-279227.0Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.CVE-2026-279237.8Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.CVE-2026-279247.8Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.CVE-2026-279256.5Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacen CVE-2026-279267.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Cloud Files Mini Filter Driver allows CVE-2026-279277.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Projected File System allows an autho CVE-2026-279288.7Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-279297.0Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally.CVE-2026-27939.8Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these b CVE-2026-279305.5Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.