LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-3847 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 11, 2026

Firefox - Remote Code Execution

Published: March 10, 2026Updated: March 11, 2026Remote Exploitable

Overview

Firefox < 148.0.2 contains memory safety bugs caused by memory corruption, letting attackers potentially execute arbitrary code, exploit requires successful memory corruption.

Severity & Score

Severity: High
CVSS Score: 8.8
EPSS Score: 4.1%(Probability of exploitation in next 30 days)

Impact

Attackers can exploit memory corruption to execute arbitrary code, potentially compromising the system.

Mitigation

Update to version 148.0.2 or later.

Social Media Activity(2 posts)

TheHackerWire
TheHackerWire
@thehackerwire
Mar 10, 2026

🟠 CVE-2026-3847 - High (8.8) Memory safety bugs present in Firefox 148.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 14... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-3847/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Mar 10, 2026

🟠 CVE-2026-3847 - High (8.8) Memory safety bugs present in Firefox 148.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 14... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-3847/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2026-3847
Severity
High
CVSS Score
8.8
Type
undefined
Status
confirmed
EPSS
4.1%
Social Posts
2

CWE

  • CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

4.1%Probability of exploitation in the next 30 days