Security Advisory

CVE-2026-4691

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-24 12:30:24
Last updated 2026-05-07 14:50:45
Assigner mozilla
State PUBLISHED

Description

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.