CVE-2026-4696 - Vulnerability Analysis

Overview

Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9 contain a use-after-free vulnerability in the Layout: Text and Fonts component, letting attackers cause memory corruption or remote code execution, exploit requires crafted input.

Severity & Score

Impact

Attackers can cause memory corruption or execute arbitrary code remotely, potentially leading to full system compromise.

Mitigation

Update to Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9 or later.

References

• https://www.mozilla.org/security/advisories/mfsa2026-22/
• https://bugzilla.mozilla.org/show_bug.cgi?id=2020190
• https://www.mozilla.org/security/advisories/mfsa2026-20/
• https://www.mozilla.org/security/advisories/mfsa2026-21/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner