LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-4724 - Vulnerability Analysis

CriticalCVSS: 9.1

Last Updated: March 25, 2026

Firefox - Undefined Behavior

Published: March 24, 2026Updated: March 25, 2026Remote Exploitable

Overview

Firefox < 149 contains an undefined behavior vulnerability in the Audio/Video component, letting attackers potentially cause unpredictable effects, exploit requires no special conditions.

Severity & Score

Severity: Critical
CVSS Score: 9.1

Impact

Attackers can cause unpredictable behavior potentially leading to crashes or other impacts.

Mitigation

Update to version 149 or later.

Details

CVE ID
CVE-2026-4724
Severity
Critical
CVSS Score
9.1
Type
undefined
Status
confirmed

CWE

  • CWE-758

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N